@orangecheck/legal 0.7.11 → 0.7.13

package/dist/index.mjs

@@ -5,9 +5,9 @@ import { jsxs, jsx } from 'react/jsx-runtime';
 var LEGAL_ENTITY = "OrangeCheck";
 var LEGAL_ENTITY_LONG = "OrangeCheck (OCHK), an unincorporated project";
 var ENTITY_PENDING = true;
-var CONTACT_GENERAL = "hello@ochk.io";
+var CONTACT_GENERAL = "contact@ochk.io";
 var CONTACT_SECURITY = "security@ochk.io";
-var CONTACT_PRIVACY = "hello@ochk.io";
+var CONTACT_PRIVACY = "contact@ochk.io";
 var GOVERNING_LAW_STATE = "Delaware, United States";
 var ARBITRATION_SEAT = "Wilmington, Delaware, United States";
 var GLOBAL_TOKENS = {
@@ -1778,30 +1778,14 @@ function SecurityDisclosure({
           children: securityContact
         }
       ),
-      " ",
-      "\u2014 use PGP for highly sensitive findings; the fingerprint and key are published at",
-      " ",
-      /* @__PURE__ */ jsx(
-        "a",
-        {
-          href: "https://github.com/orangecheck/.github/blob/main/SECURITY.md",
-          target: "_blank",
-          rel: "noopener noreferrer",
-          className: "text-primary underline",
-          children: "github.com/orangecheck/.github/SECURITY.md"
-        }
-      ),
-      ". Alternatively, open a private GitHub security advisory on the most relevant",
+      ", or open a private GitHub security advisory on the most relevant",
       " ",
       /* @__PURE__ */ jsx("code", { className: "text-[0.95em]", children: "orangecheck/*" }),
       " repository."
     ] }),
     /* @__PURE__ */ jsx("ul", { className: "divide-y border text-xs", children: [
-      ["acknowledgement", "within 72 hours of receipt"],
-      [
-        "triage",
-        "within 7 days \u2014 whether we agree it is a vulnerability, the severity assigned, and a target fix date"
-      ],
+      ["reply", "we aim to reply to every report within 30 days"],
+      ["fix", "we can't promise a time to a fix yet"],
       [
         "coordinated disclosure",
         "we credit you (unless you prefer anonymity) and publish an advisory once the fix ships"