Skip to content

Security: digital-gov-mg/nui-federation-sdk

Security

SECURITY.md

Security Policy

Supported Versions

Use this section to tell people about which versions of your project are currently being supported with security updates.

Version Supported
0.1.x

Reporting a Vulnerability

We take the security of NUI Federation TypeScript SDK seriously. If you believe you have found a security vulnerability, please follow these steps:

  1. DO NOT disclose the vulnerability publicly.
  2. Send a detailed description of the vulnerability to:
    • Email: [email protected]
    • Subject Line: "Security Vulnerability Report - NUI Federation SDK"

Please include:

  • A description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact of the vulnerability
  • Any possible solutions you've considered

What to expect:

  • We will acknowledge receipt of your vulnerability report within 48 hours
  • We will provide a more detailed response within 72 hours
  • We will work on fixing the vulnerability and keep you informed of our progress
  • Once the vulnerability is fixed, we will publicly acknowledge your responsible disclosure

Security Best Practices

When using the NUI Federation TypeScript SDK:

  1. Always keep the SDK updated to the latest version
  2. Use environment variables for sensitive configuration
  3. Implement proper error handling
  4. Follow the principle of least privilege when setting up API access
  5. Regularly audit your implementation

Security Features

The SDK implements several security measures:

  • HTTPS for all API communications
  • API key authentication
  • Request validation
  • Rate limiting support

Contact

For any security-related questions or concerns, please contact:

There aren’t any published security advisories