Skip to content

Security: taylordwraps/.github

Security

SECURITY.md

Security

Reporting a problem

If you find a security problem in any repository under taylordwraps (an exposed key, a page that shows something it should not, a way into a private room), please do not open a public issue. Instead, use GitHub's private vulnerability reporting on the repository (Security tab → Report a vulnerability), or tell the person who introduced you to the shop.

What we will never ask for

Nobody from the shop or the lab will ever ask for a password, a sign-in code, a recovery code, a store login or a key. If someone does, in the shop's name or the lab's, the answer is no; please report it the same way.

What these repositories never hold

No payments, no customer details, no prices, no keys or wallets. The websites are static and send nothing from your browser (SOP-IT-003). Public rooms carry only pages an owner listed, after a tripwire that reads every file (SOP-OPS-003).

There aren't any published security advisories