Skip to content

SECURITY.md

Latest commit

 

History

History
27 lines (18 loc) · 1.01 KB

SECURITY.md

File metadata and controls

27 lines (18 loc) · 1.01 KB
Raw

Security Policy

Vela is used inside trading products, so we treat security reports as a priority.

Reporting a vulnerability

Email security@velacharts.dev with a description of the issue, the affected package and version, and steps to reproduce. Please do not open a public GitHub issue for anything you believe is a vulnerability.

You will get an acknowledgement within two business days and a fix or a mitigation plan within a timeframe that matches the severity. We credit reporters in the release notes unless you ask us not to.

Supported versions

Security fixes land on the latest published minor of @luxalgo/vela. Commercial licensees are covered by the Support & SLA Schedule at https://www.luxalgo.com/licensing/#sla, which lists supported versions and response targets by tier.

Scope

  • @luxalgo/vela (this repository) and its published builds on npm.
  • The attribution mark, providers and workspace shipped in this package.

Vulnerabilities in PineTS or Vela PineTS belong in their own repositories.