From 101a6458a265e703840660d8fbd66632b4234479 Mon Sep 17 00:00:00 2001
From: Florent Morselli <florent@morselli.fr>
Date: Thu, 22 Oct 2026 20:02:42 +0200
Subject: [PATCH 1/3] docs(readme): add the Slabs project mark

---
 README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/README.md b/README.md
index b84ff17a6..690634dc8 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,8 @@
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/Spomky-Labs/brand/main/4-Web/svg/marques-de-projet/marque-jwt-framework-inverse.svg">
+  <img alt="JWT Framework" width="316" height="48" src="https://raw.githubusercontent.com/Spomky-Labs/brand/main/4-Web/svg/marques-de-projet/marque-jwt-framework-couleur.svg">
+</picture>
+
 PHP JWT Framework
 =================
 

From 8d0e557afa9b0f0048a461c55fdb62ae94d730ac Mon Sep 17 00:00:00 2001
From: Florent Morselli <florent@morselli.fr>
Date: Thu, 22 Oct 2026 20:02:45 +0200
Subject: [PATCH 2/3] docs(security): add the Slabs security advisory template

---
 .github/SECURITY_ADVISORY_TEMPLATE.md | 64 +++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 .github/SECURITY_ADVISORY_TEMPLATE.md

diff --git a/.github/SECURITY_ADVISORY_TEMPLATE.md b/.github/SECURITY_ADVISORY_TEMPLATE.md
new file mode 100644
index 000000000..5f3230b96
--- /dev/null
+++ b/.github/SECURITY_ADVISORY_TEMPLATE.md
@@ -0,0 +1,64 @@
+<!--
+Slabs security advisory template (brand guidelines, page 49).
+
+1. Fill the fields of the GitHub form (Security > Advisories > New draft) from the first block.
+2. Paste the rest, from "Impact" to "Credits", into the Description field.
+3. Then, in this order: request the CVE, publish the patched release with the release note below, post the social message.
+
+Tone: calm and factual. What is wrong, who is affected, how serious it is, what to do.
+Severity in words, never shown by a color. No capitals for emphasis, no exclamation marks.
+Credit the reporter only with their agreement.
+-->
+
+Title: [package]: [short description of the issue]
+
+Ecosystem: Composer
+Package: [vendor/package]
+Affected versions: [for example >= 4.0.0, < 4.9.2]
+Patched versions: [for example 4.9.2]
+Severity: [Low, Moderate, High or Critical], CVSS [score] ([vector])
+Weakness: [CWE identifier and name]
+CVE: [CVE identifier], once assigned
+
+---
+
+### Impact
+
+[What is wrong, under which conditions, and what an attacker could do.]
+
+Applications are affected if they use [package] [affected versions] and [condition].
+
+### Patches
+
+Fixed in [patched versions]:
+
+```
+composer update [vendor/package]
+```
+
+### Workarounds
+
+[What users can do before upgrading, or "None".]
+
+### References
+
+- [Link to the fix: commit or pull request]
+- [Link to the release notes]
+
+### Credits
+
+Reported by [Reporter], with their agreement.
+
+---
+
+## Release note of the patched version
+
+### Security
+
+- [Short description of the issue] ([GHSA identifier], [CVE identifier]). [Severity] severity. Upgrade from [affected versions]. Thanks to [Reporter] for the report.
+
+---
+
+## Social post
+
+[package] [patched version] fixes a [severity] severity issue: [short description]. Versions [x] to [y] are affected; upgrade to [z]. Details: [advisory link] #php #security

From 99296a2c44178626931b1d1113c0f4ae6a9bfa75 Mon Sep 17 00:00:00 2001
From: Florent Morselli <florent@morselli.fr>
Date: Thu, 22 Oct 2026 20:29:47 +0200
Subject: [PATCH 3/3] docs(readme): replace the title with the one-line
 description

---
 README.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 690634dc8..751a3b7d6 100644
--- a/README.md
+++ b/README.md
@@ -3,8 +3,7 @@
   <img alt="JWT Framework" width="316" height="48" src="https://raw.githubusercontent.com/Spomky-Labs/brand/main/4-Web/svg/marques-de-projet/marque-jwt-framework-couleur.svg">
 </picture>
 
-PHP JWT Framework
-=================
+JSON Web Tokens: JWS, JWE and JWK.
 
 ![Build Status](https://github.com/web-token/jwt-framework/workflows/Integrate/badge.svg)