Skip to content

Security: EmertonData/glide

SECURITY.md

Security Policy

Supported versions

Only the latest version of glide-py published on PyPI receives security fixes.

Reporting a vulnerability

Please do not open a public GitHub issue for security vulnerabilities, as this would disclose the issue before a fix is available.

To report a vulnerability, use the "Report a vulnerability" button in the Security and Quality tab of this repository. This opens a draft private advisory visible only to you and the maintainers.

Please include as much of the following as possible: a description of the vulnerability, the affected version(s), steps to reproduce, and any proof-of-concept code.

Response timeline

  • Acknowledgement: within 5 business days of receiving your report.
  • Triage and initial fix plan: within 14 calendar days of acknowledgement.

We will keep you informed as the fix progresses and will credit you in the security advisory unless you prefer to remain anonymous.

Out of scope

Vulnerabilities in GLIDE's dependencies (NumPy, SciPy, etc.) should be reported directly to those projects. We will update our dependencies when upstream fixes are available.

There aren't any published security advisories