Comments (6)
Mostly boilerplate text to "check the box" and agree mostly redundant - the verbiage is actually less specific than the license, so I'll just remove that.
supported releases? i would say, there is no support at all, cause this is no commercial product
'supported' in this context should be clarified as in "only report fixing bugs that affect the latest "release" tag version. I'll reword.
The presence of the SECURITY.md file will automatically enable a few "standard" URLs that are used by distribution package tracking - for example, the https://github.com/johnsonjh/duma/security/policy link.
who is [email protected] ? as this library should not get delivered - and is "just" for development ..
The email goes to me - I will make that more apparent.
While it's not strictly mandatory, having a "non-public" contact for reporting bugs deemed sensitive and is important criteria for distribution inclusion.
also, it's the only way you'll ever receive some bug reports from reporters that have defined "responsible disclosure" rules that prevent them from making public bug reports for certain issues, even things I wouldn't consider security related.
Example, current Debian upstream guide states that packages need "a well-publicised preferred method for reporting security issues" and this is an item reviewed during requests for official inclusion in distributions such as RHEL or Ububtu-LTS.
there can't be a security vulnerability!
I mostly agree, but it's easier to "check the box" than to get an exception!
from duma.
Reopening as further clarification re: security is likely justified.
(I'll review after I get some sleep.)
from duma.
thanks for clarification.
my email [email protected] does also accept PGP:
the public key is on some keyservers; the fingerprint is 558E C9EF 3EAB 05E8 76AF 61DC D44C 9772 6FA1 CC0B
just in case, a 2nd email is useful
from duma.
Absolutely. I'll add your details, make a note about checking the keyservers as well, and then close this.
from duma.
ack
from duma.
@hayguen - should be acceptable now in HEAD, please reopen if you'd like anything else changed here.
from duma.
Related Issues (20)
- Need documentation for use on Ubuntu and others with compilers that default to -D_FORTIFY_SOURCE=2
- Public signing key HOT 1
- Cygwin instructions in README do not work HOT 5
- What does DUMA_FAIL_ENV mean? HOT 1
- Test fails on GNU Hurd HOT 8
- Build unreproducible on armhf HOT 3
- CXX Standard HOT 2
- Specifying a CMake toolchain file prevented host/createconf from being created HOT 1
- error C2036: βconst void *β: unknown size in pointer arithmetic HOT 1
- Stacktrace library will not compile
- Add /MT to MSVC when compiling shared library HOT 2
- What is DUMA_SO/LIB and is it an error? HOT 1
- Preprocessor defines will not pass to createconf
- testalloc0.cpp crashes HOT 1
- Duration of tstheap
- C11 aligned_alloc() not supported
- Not working with Cygwin on Windows HOT 1
- Reproducible build issue (use of 'date') HOT 4
- Local compiler flags ignored
- Typo on library name (libduma.so) in man page. Wrong number of zeros. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from duma.