Skip to content

Security: engineering87/dotnet-design-patterns

SECURITY.md

Security Policy

Scope

This repository is a teaching resource. It contains reference implementations of the twenty-three Gang of Four design patterns and is not published as a package, nor is it intended to be deployed as a service.

That said, code is read and copied, so a defect that would teach an unsafe practice is treated as a security issue here. Examples include a broken synchronisation primitive, an unvalidated path, or a resource that is never released.

Supported versions

Only the main branch is supported. Fixes are applied there.

Reporting a vulnerability

Report a suspected vulnerability privately, using the GitHub Security Advisories page of this repository, or by email to francesco.delre.87[at]gmail.com. Please do not open a public issue for a security report.

Include the affected file, a description of the problem, and, where possible, the conditions needed to reproduce it.

You can expect an acknowledgement within seven days, and an assessment within thirty days.

There aren't any published security advisories