Hi, I'd like to suggest a security policy to fastutil project.
A Security Policy is a GitHub standard document (SECURITY.md) that can be found in the "Security Tab" to instruct users how to report vulnerabilities in a safe and efficient way. It also appears in the About section of the project main page:
Together with this issue I'll submit one suggestion of Security Policy, feel free to edit it directly or ask me for editions until it is in compliance with how you would best handle vulnerability report
Disclosure: I'm from Google, the Google Open Source Security Team (GOSST), and I'm working on improving the supply-chain security in many relevant open source projects.
Hi, I'd like to suggest a security policy to fastutil project.
A Security Policy is a GitHub standard document (SECURITY.md) that can be found in the "Security Tab" to instruct users how to report vulnerabilities in a safe and efficient way. It also appears in the About section of the project main page:
It is both a Scorecard Recommendation (being a security measure of medium priority) and a Github Recommendation.
Together with this issue I'll submit one suggestion of Security Policy, feel free to edit it directly or ask me for editions until it is in compliance with how you would best handle vulnerability report
Disclosure: I'm from Google, the Google Open Source Security Team (GOSST), and I'm working on improving the supply-chain security in many relevant open source projects.