haskell / haskell/security-advisories
update Hackage to include "report a security issue" info
Open
- Dominant language
- Haskell
- Stars
- 64
- Forks
- 27
- Avg merge
- 3h 39m
- Merged PRs (30d)
- 1
Description
Hackage should be updated to provide, at the very least, a link or some info about how to report
security issues in packages.
Not in scope: updating Hackage to indicate vulnerable packages/versions and provide details of
vulnerabilities. While we would like to see this, it is currently not the responsibility of the SRT to implement this.
Contributor guide
Assessment
This issue has not been assessed yet.