Skip to content

Security: hellotool/ttk-text

SECURITY.md

Security Policy

Warning

THIS PROJECT IS PROVIDED "AS IS", WITHOUT ANY SECURITY GUARANTEES. ALL RISKS ASSOCIATED WITH USING THIS SOFTWARE ARE ASSUMED BY YOU.

To reduce maintenance costs, this project IS NOT RESPONSIBLE FOR ANY SECURITY VULNERABILITIES. You should assess the risks yourself and decide whether to use it.

Reporting a Vulnerability

If you discover a security vulnerability, you can report it through the following channels (we will decide whether to address it on a case-by-case basis):

Channel 1: Via GitHub Security Advisory

  1. Visit https://github.com/hellotool/ttk-text/security/advisories.
  2. Click New draft advisory.
  3. Fill in the vulnerability details as requested.
  4. Click Create draft security advisory.

Channel 2: Via GitCode Private Issue

  1. Visit https://gitcode.com/hellotool/ttk-text/issues/create?type=security.
  2. Fill in the vulnerability details as requested.
  3. Click Submit issue.

Channel 3: Via Email (Not Recommended)

  • Email: jesse205@qq.com
  • Subject Suggestion: [SECURITY] Brief description of the vulnerability

Notes on Report Handling

  • Reports are NOT GUARANTEED to be processed or fixed.
  • NO RESPONSE TIME is promised.
  • Fixes depend on the maintainer's time and willingness.
  • It is recommended that you fix the vulnerability yourself before reporting it.

There aren’t any published security advisories