The following versions of spawn.build are currently supported with security updates:
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1 | ❌ |
This is a Workday sponsored project hosted on GitHub.
To report a security vulnerability, please do not open a public GitHub issue. Instead:
-
Navigate to the Security Advisories page for this repository and click Report a vulnerability.
-
Alternatively, contact the project maintainers directly by emailing the developers.
Please include as much of the following information as possible to help us understand and reproduce the issue:
- The type of vulnerability (e.g. dependency with known CVE, insecure API usage, credential leak)
- The affected module(s) and version(s)
- Step-by-step instructions to reproduce the issue
- Any proof-of-concept code or test cases
- The potential impact and severity assessment
| Stage | Target |
|---|---|
| Acknowledgement | 2 business days |
| Severity assessment | 5 business days |
| Fix or mitigation plan | 15 business days |