Skip to content

Commit

Permalink
chore: update badges and security policy
Browse files Browse the repository at this point in the history
  • Loading branch information
fraxken committed Jan 11, 2023
1 parent da3616a commit af12de3
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 21 deletions.
10 changes: 4 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,8 @@
# Spinner
![version](https://img.shields.io/badge/dynamic/json.svg?url=https://raw.githubusercontent.com/TopCli/Spinner/master/package.json&query=$.version&label=Version)
[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://github.com/TopCli/Spinner/commit-activity)
[![Security Responsible Disclosure](https://img.shields.io/badge/Security-Responsible%20Disclosure-yellow.svg)](https://github.com/nodejs/security-wg/blob/master/processes/responsible_disclosure_template.md
)
[![mit](https://img.shields.io/github/license/Naereen/StrapDown.js.svg)](https://github.com/TopCli/Spinner/blob/master/LICENSE)
![build](https://img.shields.io/github/workflow/status/TopCli/Spinner/Node.js%20CI)
![version](https://img.shields.io/badge/dynamic/json.svg?style=for-the-badge&url=https://raw.githubusercontent.com/TopCli/Spinner/master/package.json&query=$.version&label=Version)
[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg?style=for-the-badge)](https://github.com/TopCli/Spinner/commit-activity)
[![mit](https://img.shields.io/github/license/Naereen/StrapDown.js.svg?style=for-the-badge)](https://github.com/TopCli/Spinner/blob/master/LICENSE)
![build](https://img.shields.io/github/actions/workflow/status/TopCli/Spinner/node.js.yml?style=for-the-badge)

Asynchronous CLI Spinner. This package has been created to handle simultaneous/multiple spinner at a time. The package has been inspired by [Ora](https://github.com/sindresorhus/ora) but in Asynchronous.

Expand Down
18 changes: 3 additions & 15 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,4 @@
This project participates in the Responsible Disclosure Policy program for the Node.js Security Ecosystem.
# Reporting Security Issues
To report a security issue, please [publish a private security advisory](https://github.com/TopCli/Spinner/security/advisories) with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.

# Responsible Disclosure Policy

A responsible disclosure policy helps protect the project and its users from security vulnerabilities discovered in the project’s scope by employing a process where vulnerabilities are publicly disclosed after a reasonable time period to allow patching the vulnerability.

All security bugs are taken seriously and are considered as top priority.
Your efforts to responsibly disclose your findings are appreciated and will be taken into account to acknowledge your contributions.


## Reporting a Security Issue

Any security related issue should be reported to the [Node.js Ecosystem](https://hackerone.com/nodejs-ecosystem
) program hosted on HackerOne which follows the [3rd party responsible disclosure process](https://github.com/nodejs/security-wg/blob/master/processes/third_party_vuln_process.md) set by the Node.js Security WG. One may also directly contact the project’s maintainers, but through the HackerOne program the Security WG members will take care of triaging the vulnerability and invite project maintainers to participate in the report.

As an alternative method, vulnerabilities can also be reported by emailing security-ecosystem@nodejs.org.
Our vulnerability management team will respond within one week. If the issue is confirmed as a vulnerability, we will open a Security Advisory and acknowledge your contributions as part of it. This project follows a 90 day disclosure timeline.

0 comments on commit af12de3

Please sign in to comment.