@orangecheck/legal 0.7.11 → 0.7.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +3 -19
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +3 -19
- package/dist/index.mjs.map +1 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1784,30 +1784,14 @@ function SecurityDisclosure({
|
|
|
1784
1784
|
children: securityContact
|
|
1785
1785
|
}
|
|
1786
1786
|
),
|
|
1787
|
-
" ",
|
|
1788
|
-
"\u2014 use PGP for highly sensitive findings; the fingerprint and key are published at",
|
|
1789
|
-
" ",
|
|
1790
|
-
/* @__PURE__ */ jsxRuntime.jsx(
|
|
1791
|
-
"a",
|
|
1792
|
-
{
|
|
1793
|
-
href: "https://github.com/orangecheck/.github/blob/main/SECURITY.md",
|
|
1794
|
-
target: "_blank",
|
|
1795
|
-
rel: "noopener noreferrer",
|
|
1796
|
-
className: "text-primary underline",
|
|
1797
|
-
children: "github.com/orangecheck/.github/SECURITY.md"
|
|
1798
|
-
}
|
|
1799
|
-
),
|
|
1800
|
-
". Alternatively, open a private GitHub security advisory on the most relevant",
|
|
1787
|
+
", or open a private GitHub security advisory on the most relevant",
|
|
1801
1788
|
" ",
|
|
1802
1789
|
/* @__PURE__ */ jsxRuntime.jsx("code", { className: "text-[0.95em]", children: "orangecheck/*" }),
|
|
1803
1790
|
" repository."
|
|
1804
1791
|
] }),
|
|
1805
1792
|
/* @__PURE__ */ jsxRuntime.jsx("ul", { className: "divide-y border text-xs", children: [
|
|
1806
|
-
["
|
|
1807
|
-
[
|
|
1808
|
-
"triage",
|
|
1809
|
-
"within 7 days \u2014 whether we agree it is a vulnerability, the severity assigned, and a target fix date"
|
|
1810
|
-
],
|
|
1793
|
+
["reply", "we aim to reply to every report within 30 days"],
|
|
1794
|
+
["fix", "we can't promise a time to a fix yet"],
|
|
1811
1795
|
[
|
|
1812
1796
|
"coordinated disclosure",
|
|
1813
1797
|
"we credit you (unless you prefer anonymity) and publish an advisory once the fix ships"
|