New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Trying to get in touch regarding a security issue #819

Closed

zidingz opened this issue Aug 30, 2021 · 3 comments · May be fixed by #820

zidingz commented Aug 30, 2021

Hey there!

I'd like to report a security issue but cannot find contact instructions on your repository.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

The text was updated successfully, but these errors were encountered:

Member

hhaidar commented Aug 31, 2021 •

edited

Loading

Hey @zidingz, thank you. I think we're planning on archiving the project at some point but I'll try my best to address the issue.

You can reach out to me directly:

[email protected]

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=qIzq
-----END PGP PUBLIC KEY BLOCK-----

Author

zidingz commented Sep 1, 2021

Thanks for your reply!

As an alternative to archiving, you might consider finding new (co-)maintainers for your
open source software project on https://adoptoposs.org/

zidingz closed this as completed

zidingz mentioned this issue

Create SECURITY.md #820

Open

Author

zidingz commented Sep 1, 2021

And if it'll save you time: #820

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment