From e360063c98b43ae799d013237d67a5cefd37c6b3 Mon Sep 17 00:00:00 2001 From: Terts Diepraam Date: Fri, 10 Jul 2026 10:15:43 +0200 Subject: [PATCH] Initialize with repop (#689) --- CONTRIBUTING.md | 4 ++++ SECURITY.md | 31 +++++++++++++++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 SECURITY.md diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index d2616e67..415fd913 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -5,6 +5,8 @@ _domain_ crate. This is a first draft version. Feel free to, er, contribute to it. + + ## Code of Conduct This project and everyone participating in it is governed by the [NLnet Labs @@ -18,6 +20,8 @@ Before contributing to this project, please be aware of the [NLnet Labs LLM Poli [NLnet Labs LLM Policy]: https://www.nlnetlabs.nl/llm-policy + + ## Submitting contributions ### Pull requests diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..5770ccd7 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,31 @@ +# Security Policy + +## Supported Versions + +NLnet Labs adheres to the straightforward, semantic versioning scheme that is +commonly used in the software industry. + +Support is provided in respect of the latest release, i.e. releases with the +highest minor and patch version level. We do not backport security fixes to +older (minor) versions. In the event a new major version is released (e.g. from +3.2.18 to 4.0.0), support will also be provided on the latest minor version of +the previous major version (3.2.18) for a period of one year from the release of +the new major version (4.0.0). + +In the event that, during this period, a new patch or minor version of the +previous major version is released, then support on these versions will only be +provided for the remainder of the one-year-period. + +You can find detailed information on our software support policy here: + +https://www.nlnetlabs.nl/support/software-support-policy/ + +## Reporting a Vulnerability + +We take security very seriously. If you have discovered a security vulnerability +in one of our projects and you would like to report it to us, you can send an +encrypted message to our Security Entry Point. + +Details are described here: + +https://www.nlnetlabs.nl/security-report/