# Security Policy

Security vulnerabilities should be disclosed privately to the [project maintainers](./CODEOWNERS) via GitHub's [Security Advisories](https://docs.github.com/en/code-security/security-advisories) feature: [Report a vulnerability](https://github.com/stevennevins/daml-tools/security/advisories/new).

Please see
[Privately reporting a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability)
for more information on how to submit a vulnerability using GitHub's interface.

## Legal

daml-lint is made available under the GNU AGPL 3.0 License, which disclaims all warranties in relation to the project and which limits the liability of those that contribute and maintain the project. You are solely responsible for any use of daml-lint and you assume all risks associated with any such use. This Security Policy in no way evidences or represents an on-going duty by any contributor to correct any flaws or alert you to all or any of the potential risks of utilizing the project.
