Use this repository to dispute a verdict or correct a public report on LPM Firewall.
- Dispute a verdict. A package version is blocked or flagged and you believe that is wrong. Maintainers are welcome. Tell us what the flagged code does and why it is expected behavior.
- Correct a report. A report has wrong or outdated details, such as metadata, dates, links or advisory text.
Every report page also has a link that opens a dispute with the package and report already filled in.
We review the issue against the current evidence for that version. If the decision changes, the public report and the Firewall decision are updated, and we close the issue with a note.
Some blocks come from OpenSSF/OSV malicious-package advisories. A report built only on an advisory follows that advisory. To dispute one, please also report it to ossf/malicious-packages.
- Do not paste secrets, tokens or private source code. Issues here are public.
- Link to public source, documentation or changelogs where you can.