Skip to content

Conversation

@UlisesGascon
Copy link
Member

@UlisesGascon UlisesGascon self-assigned this Sep 8, 2025
Copy link
Member

@bjohansebas bjohansebas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, minor detail — do we want to update this part to make it more aligned with the CNA?
Maybe for the email, we could say that there are 5 business days to respond, and on the 6th day, we advise them to contact the CNA.

Also, I seem to recall that we had agreed not to have a set time frame to respond to reports, although it seems like we only applied that rule when reports are submitted through GitHub

@bjohansebas
Copy link
Member

@expressjs/express-tc @expressjs/security-wg

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants