Merge pull request #201 from salesforce/add-security-md

Create SECURITY.md
salesforce · Aug 12, 2020 · dc1931c · dc1931c
2 parents 8834cba + 88927b0
commit dc1931c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,7 @@
+## Security
+
+Please report any security issue to [security@salesforce.com](mailto:security@salesforce.com)
+as soon as it is discovered. This library limits its runtime dependencies in
+order to reduce the total cost of ownership as much as can be, but all consumers
+should remain vigilant and have their security stakeholders review all third-party
+products (3PP) like this one and their dependencies.