Merge afadb7de26 into 2951748f4c

Merge pull request #1 from HHR-CPA/dependabot/npm_and_yarn/npm_and_yarn-4265e88a4c
Bump js-yaml from 3.14.1 to 3.14.2 in the npm_and_yarn group across 1 directory
2026-03-04 06:51:04 +08:00 · 2026-01-14 07:30:41 +08:00 · 2025-11-20 20:16:03 -05:00 · 2025-11-20 20:06:05 -05:00 · 2025-11-21 01:00:28 +00:00
1 changed files with 21 additions and 0 deletions
--- a/SECURITY.md
+++ b/SECURITY.md
@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.
Author	SHA1	Message	Date
Heyson315	a5e5ee5b38	Merge `afadb7de26` into `2951748f4c`	2026-01-14 07:30:41 +08:00
Hrahman315	afadb7de26	Merge pull request #1 from HHR-CPA/dependabot/npm_and_yarn/npm_and_yarn-4265e88a4c Bump js-yaml from 3.14.1 to 3.14.2 in the npm_and_yarn group across 1 directory	2025-11-20 20:16:03 -05:00
Hrahman315	e1786a5307	Create SECURITY.md for security policy Added a security policy document outlining supported versions and vulnerability reporting. Signed-off-by: Hrahman315 <hrahma10@wgu.edu>	2025-11-20 20:06:05 -05:00
dependabot[bot]	8bd986d8af	Bump js-yaml in the npm_and_yarn group across 1 directory Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml). Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>	2025-11-21 01:00:28 +00:00