You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

25 lines
1.2 KiB

1 month ago
  1. # Security Policies and Procedures
  2. ## Reporting a Bug
  3. The `cookie` team and community take all security bugs seriously. Thank
  4. you for improving the security of the project. We appreciate your efforts and
  5. responsible disclosure and will make every effort to acknowledge your
  6. contributions.
  7. Report security bugs by emailing the current owner(s) of `cookie`. This
  8. information can be found in the npm registry using the command
  9. `npm owner ls cookie`.
  10. If unsure or unable to get the information from the above, open an issue
  11. in the [project issue tracker](https://github.com/jshttp/cookie/issues)
  12. asking for the current contact information.
  13. To ensure the timely response to your report, please ensure that the entirety
  14. of the report is contained within the email body and not solely behind a web
  15. link or an attachment.
  16. At least one owner will acknowledge your email within 48 hours, and will send a
  17. more detailed response within 48 hours indicating the next steps in handling
  18. your report. After the initial reply to your report, the owners will
  19. endeavor to keep you informed of the progress towards a fix and full
  20. announcement, and may ask for additional information or guidance.