asdf/SECURITY.md

Security Policy

This security policy only applies to asdf core, which is the code contained in this repository. All plugins are the responsibility of their creators and are not covered under this security policy.

Supported Versions

Typically only the latest version is maintained. Versions are released sequentially, with major, minor, and patch versions incremented as necessary. If a vulnerability is found in an old version of asdf, updating to the latest version of asdf will be required.

Version	Supported
0.7.x	✅
0.6.x	❌
0.5.x	❌
0.4.x	❌
0.3.x	❌
0.2.x	❌
0.1.x	❌

Reporting a Vulnerability

To report a vulnerability please contact one of:

• @Stratus3D via email: see https://stratus3d.com/contact/ for email. PGP is not setup for this email address.
• @danhper via email: see https://daniel.perez.sh/ for email and PGP key
• TODO: Add secure contact methods of others on the core team.