open/playground-design-system
1
0
Fork 0
Code Issues Releases 1 Activity
playground-design-system/SECURITY.md
Kjell Tore Guttormsen dcd7b41209 docs: add SECURITY.md 
Vulnerability disclosure policy with contact address and canonical
Forgejo URL, per org-wide AAA+ C-axis (trust) rollout.
2026-08-16 21:14:30 +02:00

1 KiB
Raw Blame History

Security policy

Reporting a vulnerability

Report privately to security@fromaitochitta.com - do not open a public issue. Canonical repository: https://git.fromaitochitta.com/open/playground-design-system

Please include the affected version or commit, a minimal reproduction, and the impact you see. We acknowledge every report within 5 working days, agree a fix and disclosure timeline with the reporter, and aim to disclose within 90 days of the initial report.

Response process

  1. Acknowledge within 5 working days.
  2. Triage and confirm severity within 10 working days.
  3. Develop and test a fix.
  4. Publish an advisory and credit the reporter unless they prefer to remain anonymous.

Supported versions

This repository has not yet reached a 1.0 release. Only the latest tagged 0.x version (currently 0.6.0, see CHANGELOG.md) is supported; security fixes land on main and are released as the next 0.x tag.

Advisories

No advisories have been published for this repository to date.