Skip to content

Security: php-tuf/composer-integration

Security

SECURITY.md

IMPORTANT

This plugin, as well as the PHP-TUF library it depends on, is in a pre-release state and is not considered a complete or secure implementation of the TUF framework.

This plugin should currently only be used for testing, development and feedback. Do NOT use in production for secure downloads!!

We appreciate any help finding security issues.

Security issues can be disclosed publicly until the first release. If you think you have found a security issue, please:

  1. Search the existing security issues to see if the issue is already known.
  2. If the issue is not found please create a new issue and add the "security" label to the issue.

There aren’t any published security advisories