Skip to content

Security: JarlLyng/madebyhuman

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in Made by Human, please report it privately via GitHub Security Advisories rather than opening a public issue.

We aim to respond within 7 days.

Supported Versions

Only the latest version (deployed at https://madebyhuman.iamjarl.com) is supported. The project ships continuously from main.

What's in scope

  • The website code in this repository
  • The hosted SVG badges at madebyhuman.iamjarl.com/badges/

What's out of scope

  • Third-party services we link to (GitHub, Umami, IAMJARL projects)
  • Vulnerabilities in dependencies — please report those upstream. Dependabot will pick them up here automatically.

There aren't any published security advisories