Skip to content
This repository was archived by the owner on Oct 9, 2026. It is now read-only.

Say in SECURITY.md and CONTRIBUTING.md that the package is deprecated and the provider moved #24

Merged
Laurianti merged 2 commits into from
Oct 9, 2026
Merged

Say in SECURITY.md and CONTRIBUTING.md that the package is deprecated and the provider moved #24

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e39dcf9
Say in SECURITY.md and CONTRIBUTING.md that the package is deprecated…
Laurianti Oct 9, 2026
27b3258
Say in SECURITY.md which reports the form takes, and where they go
Laurianti Oct 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions CONTRIBUTING.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
# Contributing

Issues and pull requests are welcome.
The provider moved to [CommunityToolkit.VectorData.Chroma](https://www.nuget.org/packages/CommunityToolkit.VectorData.Chroma) and is developed in [CommunityToolkit/AI](https://github.com/CommunityToolkit/AI): open issues and pull requests there. This repository will be archived.

## Build and test

See [Building and testing](README.md#building-and-testing) for:
See [Building and testing](https://github.com/ChromaDotNet/ChromaDB.VectorData/blob/v0.4.3/README.md#building-and-testing), in the README of 0.4.3, for:

- the commands
- Docker
Expand Down
6 changes: 4 additions & 2 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,9 @@

## Supported versions

Security fixes go into the latest release of `ChromaDotNet.VectorData` on NuGet. Earlier versions do not get fixes: update to the latest one.
`ChromaDotNet.VectorData` is deprecated: 0.4.4 is its last release, and no version gets fixes any more, security fixes included. Move to [CommunityToolkit.VectorData.Chroma](https://www.nuget.org/packages/CommunityToolkit.VectorData.Chroma), the same provider in the [AI Community Toolkit](https://github.com/CommunityToolkit/AI).

The form below takes reports about this package. It also takes reports about `CommunityToolkit.VectorData.Chroma`, and we pass them privately to the maintainers of the AI Community Toolkit. A vulnerability in `ChromaDotNet.Client` goes to its [security policy](https://github.com/ChromaDotNet/ChromaDB.Client/blob/main/SECURITY.md).

## Reporting a vulnerability

Expand All @@ -16,7 +18,7 @@ Include the version of the package, the version of Chroma or Chroma Cloud, and t

- We acknowledge the report within 7 days.
- We confirm or rule out the vulnerability within 14 days, and keep you informed of the progress.
- A confirmed vulnerability is fixed in a new release. A GitHub security advisory follows the release, with credit to you unless you prefer otherwise.
- A confirmed vulnerability gets a GitHub security advisory that says which package to move to, with credit to you unless you prefer otherwise. This package gets no new release.
- Please keep the details private until the advisory is published, and for at most 90 days from the report.

## How the package is published
Expand Down
Loading