Use this section to tell people about which versions of your project are currently being supported with security updates.
Version | Supported |
---|---|
0.1.x | ✅ |
We take the security of NUI Federation TypeScript SDK seriously. If you believe you have found a security vulnerability, please follow these steps:
- DO NOT disclose the vulnerability publicly.
- Send a detailed description of the vulnerability to:
- Email: [email protected]
- Subject Line: "Security Vulnerability Report - NUI Federation SDK"
- A description of the vulnerability
- Steps to reproduce the issue
- Potential impact of the vulnerability
- Any possible solutions you've considered
- We will acknowledge receipt of your vulnerability report within 48 hours
- We will provide a more detailed response within 72 hours
- We will work on fixing the vulnerability and keep you informed of our progress
- Once the vulnerability is fixed, we will publicly acknowledge your responsible disclosure
When using the NUI Federation TypeScript SDK:
- Always keep the SDK updated to the latest version
- Use environment variables for sensitive configuration
- Implement proper error handling
- Follow the principle of least privilege when setting up API access
- Regularly audit your implementation
The SDK implements several security measures:
- HTTPS for all API communications
- API key authentication
- Request validation
- Rate limiting support
For any security-related questions or concerns, please contact:
- Security Team: [email protected]