Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.0.x	✅

Reporting a Vulnerability

If you discover a security vulnerability, please report it by emailing [email protected].

Please do not report security vulnerabilities through public GitHub issues.

What to include in your report:

Description of the vulnerability
Steps to reproduce
Potential impact
Suggested fix (if any)

Response timeline:

Initial response: Within 48 hours
Status update: Within 7 days
Resolution: Varies based on complexity

Security Best Practices

Keep dependencies updated
Use environment variables for sensitive data
Enable proper authentication and authorization
Validate all inputs
Use HTTPS in production

There aren’t any published security advisories