Cleanup security.md document.

This commit is contained in:
jdalton
2019-07-23 13:57:47 -07:00
parent becd982749
commit f8c7064d45

View File

@@ -25,10 +25,10 @@ We consider the security of our systems a top priority. But no matter how much e
If you discover a security vulnerability, please use one of the following means of communications to report it to us:
- Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
- Report the security issue to the Node.js Security Working Group through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
Note that time-frame and processes are subject to each programs own policy.
- Report the security issue to the project maintainers directly.
- Report the security issue to the project maintainers directly at [security@lodash.com](mailto:security@lodash.com).
Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.