We actively maintain and provide security updates for the following versions of the project:
| Version | Supported |
|---|---|
| 1.x | ✅ |
| < 1.0 | ❌ |
If you discover a security vulnerability in this project, please follow these steps:
- Do not disclose publicly: Avoid sharing details of the vulnerability in public forums, issues, or pull requests.
- Contact us directly: Send an email to [your-email@example.com] with the following details:
- A detailed description of the vulnerability.
- Steps to reproduce the issue.
- Any potential impact or exploit scenarios.
- Response time: We aim to respond to all security reports within 72 hours. If the issue is confirmed, we will work on a fix and release it as soon as possible.
To ensure the security of your deployment:
- Always use HTTPS to encrypt data in transit.
- Regularly update dependencies to their latest secure versions.
- Avoid exposing sensitive environment variables or configuration files.
- Monitor your deployment for unusual activity.
We appreciate the efforts of the security community in identifying and responsibly disclosing vulnerabilities. Thank you for helping us make this project safer for everyone.