Skip to content

Security: kenzycodex/distributed-storage

Security

SECURITY.md

Security Policy

Supported Versions

These versions of the project are currently being supported with security updates.

Version Supported
1.0.x
< 1.0

Reporting a Vulnerability

We take the security of DistributedStorage seriously. If you believe you've found a security vulnerability, please follow these steps:

  1. Do not disclose the vulnerability publicly
  2. Email us directly at kenzycodex@gmail.com
  3. Include as much information as possible, including:
    • A description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggestions for addressing it (if any)

What to Expect

Once you've submitted a security report, you can expect:

  • Acknowledgment of your report within 72 hours
  • An initial assessment of the severity within 1 week
  • Regular updates on our progress addressing the issue
  • Credit for the discovery (unless you prefer to remain anonymous)

Disclosure Policy

When we receive a security bug report, we will:

  1. Confirm the problem and determine affected versions
  2. Audit code to find any similar problems
  3. Prepare fixes for all affected versions
  4. Release new versions and notify users

Comments on This Policy

If you have suggestions on how this process could be improved, please submit a pull request or open an issue to discuss.

There aren’t any published security advisories