Skip to content

Security: finallyjay/packagist-tracker

Security

SECURITY.md

Security Policy

Supported versions

Only the latest commit on the main branch is supported. Please update to the latest version before reporting an issue.

Reporting a vulnerability

If you discover a security issue in packagist-tracker, please report it privately using GitHub's private vulnerability reporting.

Please do not open a public issue for security reports.

When reporting, please include:

  • A description of the issue and its impact
  • Steps to reproduce
  • The affected version or commit hash
  • Any suggested remediation, if known

You can expect an initial response within a few days. Once the issue is confirmed, a fix will be prepared and released on main, and the reporter will be credited in the advisory unless they prefer to remain anonymous.

There aren't any published security advisories