Skip to content

Security: merliseclyde/BAS

Security

SECURITY.md

Security Policy

Supported Versions

Supported with security updates.

Version Supported
1.0.x
< 1.0

Reporting a Vulnerability

Please submit any vulnerability reports under Github Issues and maintainers will address as soon as possibl

Expectations

This package utilizes C/FORTRAN code for efficiency and allocates/frees memory using standard C library routines. The package is checked for memory leaks prior to releases to CRAN using ASAN/UBSBAN. The package is distributed via CRAN https://CRAN.R-project.org/package=BAS which reports additional checks. The development version may be installed from GitHub https://github.com/merliseclyde/BAS which is checked via github actions (users may check that the current version has a passing badge before installing) Bugs are reported via the Issue tracker and handled as soon as possible.
(See link above)

Assurance

It is highly unlikely that malicious code would be added to the package. All submissions to CRAN require verification via the maintainer's email, which is protected via two factor authentication. Any pull requests for contributions on github are verified by the lead maintainer. Based on the Code of Conduct and Contributing Guidelines any modifications should include unit tests that cover the additional code blocks.

There aren’t any published security advisories