Skip to content

Security: Papercusp/sidestage

Security

SECURITY.md

Security Policy

These repositories are read-only mirrors of libraries extracted from the internal Papercusp monorepo. They are published for reuse and transparency.

Reporting a vulnerability

Please do not open a public issue for a security vulnerability. Instead, use GitHub's private vulnerability reporting on the affected repository:

  1. Go to the repository's Security tab.
  2. Click Report a vulnerability.
  3. Describe the issue in as much detail as you can (impact, reproduction steps, affected versions).

If private reporting is unavailable for a given repository, open a Security Advisory draft against it, or contact the Papercusp organization owners via GitHub.

We aim to acknowledge reports promptly and will credit reporters (unless you'd prefer to remain anonymous) once a fix has shipped.

Scope

This applies to all public repositories under the Papercusp GitHub organization. Secret scanning and push protection are enabled on every public repository in this organization.

There aren't any published security advisories