Use this section to tell people about which versions of your project are currently being supported with security updates.
Version | Supported |
---|---|
5.1.x | ✅ |
5.0.x | ❌ |
4.0.x | ✅ |
< 4.0 | ❌ |
If you discover a security vulnerability within this project, please follow the procedure below for responsible disclosure:
-
Report Submission:
- Send a detailed report with clear steps to reproduce the vulnerability to [[email protected]] or use the GitHub issue tracker to create a private issue if applicable.
-
Acknowledgment:
- You will receive an acknowledgment within 48 hours of submitting your vulnerability report.
-
Investigation:
- We will review the vulnerability and analyze its impact on data integrity, privacy, or any other related aspect of the dataset. If necessary, we may request further details or clarification.
-
Updates:
- You will receive regular updates on the status of the reported vulnerability. We will aim to provide updates within 7 days of initial acknowledgment or sooner if there are developments.
-
Fixes and Patches:
- If a vulnerability is confirmed, a patch or update will be issued as part of the next dataset release. The fix will be detailed in the release notes, and any steps taken to mitigate the issue will be documented.
-
Declined Vulnerability Reports:
- If the vulnerability report is declined, we will provide a detailed explanation of why it was not accepted. If further clarification is needed, we may contact you for more information.
We prioritize maintaining the integrity and privacy of the dataset. Community contributions help keep the data secure and reliable for all users. Please reach out if you need additional assistance or have any questions about this policy.