On June 7th, 2023, the Drupal Association announced that Drupal 7 would reach End of Life on January 5th, 2025 and that effective immediately, there would be reduced support for moderately critical issues during this maintenance phase (“Long Term Support” or “LTS”). We will use commercially reasonable best efforts to provide never-ending support for Drupal 7 Core that meets the same level of support services provided during the LTS period by the Drupal Association. Additionally, we will provide a higher level of support through a 14-day mitigation SLA for proven critical and highly-critical vulnerabilities (particularly important for customers in highly regulated sectors (FedRAMP, HIPAA, PCI, etc .
Drupal Essentials (Module Support)
HeroDevs Never Ending Support for Drupal modules will follow similar standards to the Drupal Security team process. We will support remediation for proven vulnerabilities that can be reproduced and that do not require advanced permissions. Our resolution process will include confidentiality in reporting until remediation exists, review of issue impact within 14 days, coordination with module maintainers, reasonable best efforts to resolve when original maintainers are not available, and the communication and distribution of updates.
Both parties agree to work together in good faith to keep these definitions of support updated going forward.