This policy covers the repositories in the cascadiaquakes organization and the CRESCENT web services built from them (for example the viewers at *.cascadiaquakes.org).

Please do not report security problems in a public issue or pull request.

Email cascadiaquakes@uoregon.edu with:

• The affected repository, page or service
• What the problem is and how to reproduce it
• Any proof of concept, logs or screenshots that help

We will acknowledge your report, keep you updated while we look into it, and let you know when it is fixed. Please give us a reasonable amount of time to fix the problem before sharing it publicly.

In scope: code in this organization's repositories and the CRESCENT services built from them.

Out of scope: third-party services and data we link to, and denial-of-service or load testing against our services.