Mirrors/lodash
1
0
Fork 0
mirror of https://github.com/whoisclebs/lodash.git synced 2026-02-12 11:57:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cleanup security.md document.

Browse Source
This commit is contained in:
jdalton
2019-07-23 13:57:47 -07:00
parent becd982749
commit f8c7064d45
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
SECURITY.md
View File

@@ -25,10 +25,10 @@ We consider the security of our systems a top priority. But no matter how much e
If you discover a security vulnerability, please use one of the following means of communications to report it to us: If you discover a security vulnerability, please use one of the following means of communications to report it to us:
- Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix. - Report the security issue to the Node.js Security Working Group through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
Note that time-frame and processes are subject to each program’s own policy. Note that time-frame and processes are subject to each program’s own policy.
- Report the security issue to the project maintainers directly. - Report the security issue to the project maintainers directly at [security@lodash.com](mailto:security@lodash.com).
Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions. Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.