create-filegrc 0.13.4 → 0.13.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "create-filegrc",
3
- "version": "0.13.4",
3
+ "version": "0.13.5",
4
4
  "description": "Create a filegrc workspace for a SOC 2 program",
5
5
  "license": "MIT",
6
6
  "repository": {
package/src/index.js CHANGED
@@ -523,13 +523,13 @@ async function runCombinedSetup(target, input) {
523
523
  async function writeMinimalLockfile(target, name, versionRange) {
524
524
  const lock = {
525
525
  name,
526
- version: "0.13.4",
526
+ version: "0.13.5",
527
527
  lockfileVersion: 3,
528
528
  requires: true,
529
529
  packages: {
530
530
  "": {
531
531
  name,
532
- version: "0.13.4",
532
+ version: "0.13.5",
533
533
  dependencies: { filegrc: versionRange }
534
534
  }
535
535
  }
@@ -1,9 +1,9 @@
1
1
  # Security reporting channels
2
2
 
3
- This reporting-channel set identifies where people should send security concerns. A channel can be an email address, phone number, web form, named in-person contact, or another clear destination.
3
+ This draft proposes normal and fallback channels for reporting security concerns. A channel can be an email address, phone number, web form, named in-person contact, or another clear destination.
4
4
 
5
5
  - The normal channel is the method people should use first.
6
6
  - The fallback channel must still work when the normal channel is unavailable, compromised, or involved in the concern.
7
7
  - The responsible Appointment identifies the role that keeps both channels usable and known to the intended audience.
8
8
 
9
- Both channels must be usable and known to the intended audience. Do not store credentials, recovery codes, or other secrets here.
9
+ Before proposing this set, replace the fallback placeholder and confirm that people can find both channels. Do not store credentials, recovery codes, or other secrets here.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "{{project_name}}",
3
- "version": "0.13.4",
3
+ "version": "0.13.5",
4
4
  "private": true,
5
5
  "description": "filegrc workspace for a SOC 2 program",
6
6
  "type": "module",