This is the security policy for the Nu Html Checker at https://github.com/validator/validator.

A new unnumbered distribution of the Nu Html Checker is built for every push to the main branch; see https://github.com/validator/validator/releases.

Any security fixes will first be made available in an unnumbered distribution (which replaces the previous unnumbered distribution), and in the next numbered version released. No fixes of any kind are backported to the older numbered versions.

To report a security vulnerability by e-mail, send a message to mike@w3.org. PGP-encrypted messages are welcome. To send a PGP-encrypted message, you can use the key at https://github.com/sideshowbarker.gpg.