Skip to content

Document a risk-based bump window for vendored msgpack-c and NAN #12

Closed as duplicate
Closed as duplicate
Document a risk-based bump window for vendored msgpack-c and NAN#12

Description

@enochgroot
enochgroot
opened on Sep 21, 2026

SECURITY.md / README inventory the vendored msgpack-c pin (c-7.0.2). That is not a severity-based patch SLA for msgpack-c or compile-in NAN.

Document a risk-based bump window (e.g. critical native advisories within N days).

Activity

  1. enochgroot commented on Sep 21, 2026

    @enochgroot
    enochgroot
    on Sep 21, 2026
    OwnerAuthor

    Implemented in #14 (branch fix/review-open-6-13).

  2. enochgroot commented on Sep 22, 2026

    @enochgroot
    enochgroot
    on Sep 22, 2026
    OwnerAuthor

    Tracked upstream: msgpack#25702

    Closing this fork issue as a duplicate of that ticket. Numbering on enochgroot/msgpack-node is a different sequence from msgpack/msgpack-node.

  3. enochgroot
    closed this as duplicateon Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions