querylab
commented
1 month ago Thank you for pointing out this important issue. You are absolutely right, a project that handles sensitive credentials needs to have a well defined security policy. I will focus on working thoroughly on creating a security policy for Lazywarden, which will include a clear and detailed process for reporting vulnerabilities, security issues and any other related concerns. I very much appreciate this feedback and will be sure to implement it as soon as possible.
No security policy in 2024?
This project handles sensitive user credentials. It also does not have a security policy. A project like this REQUIRES a security policy that outlines a process for reporting vulnerabilities, security issues, and other security concerns.