SECURITY.md

Security Policy

csvToJson is not dependent on others packages or libraries. The only dependencies that csvToJson uses are devDependencies. This means that the prduced npm package is never affected by dependency vulnerabilities.

For the devDependencies Github Dependabot is enabled and inform us when a security vulnerability affects csvToJson. A generated Github Depedabot PR is normally quickly merged and a new version is released.

Vulnerabities

Supported Versions

Version	Supported
2.37.0	✅
2.29.0	✅
2.2.0	✅
2.0.0	✅
1.4.0	✅
1.3.3	✅
1.3.2	✅

Dev Dependencies

Version	Supported
2.29.0	✅
2.2.0	✅
2.0.0	✅
1.4.0	✅
1.3.3	⚠️ moderate dev dependencies vulnerability
1.3.2	⚠️ moderate dev dependencies vulnerability

Reporting a Vulnerability

To report a Security Vulnerability please add an Vulnerabilty Issue.