Guidelines for Vulnerability Reporting and Version Support
The security of our users and the integrity of the software development ecosystem in Mozambique are our top priorities. This security policy describes the supported versions of moz-utils and the process for reporting vulnerabilities in a responsible and confidential manner.
We currently provide active support and security updates for the following versions of the library:
| Version | Supported | Notes |
|---|---|---|
| 0.1.x | ✅ | Initial release version. Will receive active bug and security fixes. |
If you discover a security vulnerability in this library, please do not create a public Issue. Instead, use the Private Vulnerability Reporting feature directly on the GitHub repository at:
iradoweck/moz-utils - Report Vulnerability Privately
Alternatively, you may reach out privately to the primary maintainers of the project through their GitHub profile pages:
- 👤 Edmilson Muacigarro (@iradoweck)
- 🏢 Zedecks IT (@zedecks)
When submitting a report, please include:
- A detailed description of the detected vulnerability.
- Step-by-step instructions or a code snippet to reproduce the issue (PoC - Proof of Concept).
- An assessment of the potential impact on the security of production applications using the library.
We commit to reviewing your report within 48 hours and working on a patch as quickly as possible.
Thank you for helping keep the Mozambican development ecosystem secure! 🇲🇿