aboutsummaryrefslogtreecommitdiff
path: root/SECURITY.md
blob: de2b983a4c108416b13b94efeb82f9570a6fe09f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# Security Policy

## Supported Versions

The LuaRocks project supports the _latest version_ of the tool
for bugfixes and security updates. In other words, if an
issue is reported and we produce a fix, it will appear in a subsequent
patch version (x.y.Z) of the tool, but we do not backport fixes
to previous minor (x.Y.z) or major (X.y.z) versions.

## Reporting a Vulnerability

To report a vulnerability on the LuaRocks CLI tool, email 
Hisham Muhammad at hisham@luarocks.org.

To report a vulnerability on the https://luarocks.org website,
email Leaf Corcoran at leafot@gmail.com.

We will acknowledge your contact as soon as the message is
received, then assess the vulnerability and get back to you
with further feedback once analysis on our end is done.