Skip to content

Security: ext237/squarespace-wcag-utils

SECURITY.md

Security Policy

Supported Versions

SqsA11y is currently maintained as an open-source project by Joe Lippeatt and 24Moves Consulting.

Security updates will generally be applied to the latest released version.

Version Supported
Latest release Yes
Older releases No

Reporting a Vulnerability

If you believe you have found a security vulnerability in SqsA11y, please do not open a public GitHub issue.

Instead, report it privately by emailing:

[email protected]

Please include:

  • A clear description of the issue
  • Steps to reproduce it
  • The affected file or feature
  • Any known impact
  • Suggested fix, if available

I will review reports as soon as reasonably possible and may follow up for more details.

Scope

This security policy applies to the SqsA11y JavaScript library itself.

It does not apply to:

  • Security issues in Squarespace
  • Security issues in third-party scripts, plugins, embeds, or client websites
  • General WCAG/accessibility findings that do not create a security concern

Responsible Disclosure

Please give me a reasonable opportunity to investigate and resolve the issue before publicly disclosing it.

Thank you for helping keep this project safe and useful.

There aren't any published security advisories