create-filegrc 0.13.4 → 0.13.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
package/src/index.js
CHANGED
|
@@ -523,13 +523,13 @@ async function runCombinedSetup(target, input) {
|
|
|
523
523
|
async function writeMinimalLockfile(target, name, versionRange) {
|
|
524
524
|
const lock = {
|
|
525
525
|
name,
|
|
526
|
-
version: "0.13.
|
|
526
|
+
version: "0.13.5",
|
|
527
527
|
lockfileVersion: 3,
|
|
528
528
|
requires: true,
|
|
529
529
|
packages: {
|
|
530
530
|
"": {
|
|
531
531
|
name,
|
|
532
|
-
version: "0.13.
|
|
532
|
+
version: "0.13.5",
|
|
533
533
|
dependencies: { filegrc: versionRange }
|
|
534
534
|
}
|
|
535
535
|
}
|
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
# Security reporting channels
|
|
2
2
|
|
|
3
|
-
This
|
|
3
|
+
This draft proposes normal and fallback channels for reporting security concerns. A channel can be an email address, phone number, web form, named in-person contact, or another clear destination.
|
|
4
4
|
|
|
5
5
|
- The normal channel is the method people should use first.
|
|
6
6
|
- The fallback channel must still work when the normal channel is unavailable, compromised, or involved in the concern.
|
|
7
7
|
- The responsible Appointment identifies the role that keeps both channels usable and known to the intended audience.
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Before proposing this set, replace the fallback placeholder and confirm that people can find both channels. Do not store credentials, recovery codes, or other secrets here.
|