search

python / typing_extensions

Backported and experimental type hints for Python
Other
446 stars 110 forks source link

Add security documentation #403

Closed JelleZijlstra closed 6 months ago

JelleZijlstra commented 6 months ago

Closes #393.

JelleZijlstra commented 6 months ago

@AlexWaygood I think we should also add SECURITY.md but I want to talk to someone (Seth?) to confirm the PSRT is OK with dealing with hypothetical security vulnerabilities in typing-extensions.

hauntsaninja commented 6 months ago

Let's merge this. We should also think about doing https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability

JelleZijlstra commented 6 months ago

I enabled private vulnerability reporting and added a SECURITY.md pointing to it.