Skip to content

docs: add security policy and list runtime dependencies in NOTICE - #1

Merged
drkjc merged 2 commits into
mainfrom
docs/security-policy
Oct 14, 2026
Merged

drkjc merged 2 commits into
mainfrom
docs/security-policy

Conversation

@drkjc

@drkjc drkjc commented Oct 14, 2026

Copy link
Copy Markdown
Collaborator

Changes

  • SECURITY.md: how to report a vulnerability privately
  • NOTICE: lists the runtime dependencies and their licenses

@drkjc
drkjc requested a review from Samy-O7 October 14, 2026 20:02

@Samy-O7 Samy-O7 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed while in draft. SECURITY.md matches our security policy template. The NOTICE list matches an independent resolution of the compile-scope dependencies from Maven Central: 11 artifacts, all Apache-2.0, at the versions listed in THIRD-PARTY-LICENSES. pom.xml has no shade or assembly plugin, so "not bundled in its JAR" holds. Good from my side once it's marked ready.

@drkjc
drkjc marked this pull request as ready for review October 14, 2026 20:57
@drkjc
drkjc requested a review from Samy-O7 October 14, 2026 21:04

@Samy-O7 Samy-O7 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No changes since my earlier review and CI is green.

@drkjc
drkjc merged commit 265f9eb into main Oct 14, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants