docs: add security policy

2026-08-16 08:03:42 +08:00 · 2026-08-13 16:19:09 +08:00
parent ba81e304c1
commit 3004aa7f53
1 changed files with 21 additions and 0 deletions
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions of the project are currently being supported with security updates:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.12.x  | :white_check_mark: |
+| 0.11.x  | :x:                |
+| 0.10.x  | :white_check_mark: |
+| < 0.10  | :x:                |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by opening a private issue or contacting the maintainers directly.
+
+- **Where to report:** Open an issue on the repository or email the maintainers directly. Do not disclose vulnerabilities publicly before they have been addressed.
+- **Response time:** You can expect an acknowledgement of your report within **48 hours**, and a status update on the reported vulnerability at least once per week.
+- **What to expect if accepted:** The vulnerability will be assigned a severity level, tracked privately, and a fix will be prioritized based on severity. A security advisory and patch release will be published once the fix is ready.
+- **What to expect if declined:** If the report is determined not to be a vulnerability, you will receive a detailed explanation of why it was declined.