From: Eduardo San Martin Morote <posva13@gmail.com>
Date: Tue, 24 Aug 2021 07:39:41 +0000 (+0200)
Subject: chore: add security policy
X-Git-Tag: @pinia/nuxt@0.0.2~35
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d85fc336b4cc6c81f06e49d10e5f5d9dcc29f729;p=thirdparty%2Fvuejs%2Fpinia.git

chore: add security policy
---

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..fe8fb0a3
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+This is the list of versions of Pinia which are
+currently being supported with security updates.
+
+| Version         | Supported          |
+| --------------- | ------------------ |
+| 2.x.x           | :white_check_mark: |
+| 2.0.0-rc.x      | :white_check_mark: |
+| 0.5.x           | :white_check_mark: |
+| < 0.5.0         | :x:                |
+| <= 2.0.0-beta.x | :x:                |
+
+## Reporting a Vulnerability
+
+To report a vulnerability please send an email with the details to posva13@gmail.com.
+
+When a vulnerability is reported, it immediately becomes our top concern, with a full-time contributor dropping everything to work on it.
+
+While the discovery of new vulnerabilities is rare, we also recommend always using the latest versions of Vue, Pinia, and its official companion libraries to ensure your application remains as secure as possible.
+
+Thanks for helping to keep Pinia secure.