All three publishable packages are currently unreleased at 0.0.0. Security fixes apply to the current sources on the default development line.
After the First Release, only the latest published release of each package receives security updates. Earlier releases and prerelease versions are not supported.
| Package | Current state |
|---|---|
@next-friday/eslint-config-friday |
0.0.0 (unreleased) |
@next-friday/prettier-config-friday |
0.0.0 (unreleased) |
@next-friday/commitlint-config-friday |
0.0.0 (unreleased) |
Do not report security vulnerabilities in public GitHub issues.
- Use GitHub Private Vulnerability Reporting.
- Or email
security@next-friday.com. - Include reproduction steps, the affected package version or commit, relevant configuration, and environment details. Remove secrets and private data.
- Acknowledgment: Within 48 hours.
- Assessment: Within 5 business days, including severity and impact.
- Fix and advisory: For critical issues, publish a fix and GitHub Security Advisory as soon as practical when a release applies.