Comment Re:Could security be an issue as well? (Score 1) 55
Well up until the most recent release (v0.7.0) the JPEG XL reference implementation was focused on performance and quality improvements and was meant for evaluation purposes only. SECURITY.md explicitly stated, "At this time, we don't provide security and vulnerability support for any of these releases. This means that the source code may contain bugs, including security bugs, that may be added or fixed between releases and will not be individually documented."
The Security and Vulnerability Policy is much more robust now and the project follows a 90 day disclosure timeline.
The Security and Vulnerability Policy is much more robust now and the project follows a 90 day disclosure timeline.