Skip to content

Security: selldone/storefront

SECURITY.md

Selldone Storefront Project Security Policy

Introduction

This Security Policy outlines the measures and protocols in place for the Selldone Storefront project hosted on GitHub. Our commitment is to ensure the security and integrity of our code and to protect the data and privacy of our users and contributors.

Reporting a Vulnerability

We take the security of our project seriously. If you discover a security vulnerability within the Selldone Storefront project, please report it to us as soon as possible. We request that you email us at [email protected] with a detailed description of the issue. Please do not disclose the vulnerability publicly until we have had the chance to address it.

Response to Security Vulnerabilities

Upon receiving a report of a security vulnerability, our team will:

  1. Acknowledge receipt of your report within 48 hours.
  2. Investigate the issue and determine its impact and severity.
  3. Develop a fix or mitigation strategy.
  4. Release an update or patch to address the issue.
  5. Publicly acknowledge and document the vulnerability once resolved.

Security Practices in Development

To maintain the security of the Selldone Storefront project, we adhere to the following practices:

  • Regularly review and update our dependencies to address known vulnerabilities.
  • Employ static code analysis tools to identify potential security issues.
  • Conduct regular security audits of our codebase and infrastructure.
  • Implement secure coding practices and provide security training to our development team.

Data Security

We are committed to protecting the data of our users. All data stored and processed by the Selldone Storefront project is handled in accordance with best practices for data security and privacy.

Community Involvement

We believe in the power of the open-source community to help improve security. We encourage contributions and suggestions from the community regarding security improvements.

Updates to This Policy

This Security Policy may be updated periodically to reflect changes in our practices or in response to evolving security threats. We recommend that users and contributors review this policy regularly.

Contact

For any questions or concerns about this Security Policy or the security of the Selldone Storefront project, please contact us at [email protected].

There aren’t any published security advisories