This repository contains the SLICE specification and a static documentation website. The website has no backend, no user accounts and stores no user data.
Security issues that can still occur include:
- a secret, key or token committed to the repository or its history
- a vulnerable dependency in the website code
- content injection or cross-site scripting in how the website renders Markdown
Please report security problems privately, not in a public issue:
- Go to the repository's Security tab.
- Choose Report a vulnerability.
- Describe the problem, where it is, and how to reproduce it.
You will receive a reply within 7 days. Once the problem is fixed, you are credited in the changelog unless you prefer not to be.
Only the current main branch of the website is maintained. Archived versions of the specification are documents, not software, and receive no security updates.