Security Policy

Reporting a Vulnerability

I take the security of this project seriously. If you believe you have found a security vulnerability, please report it to me responsibly.

Please do not report security vulnerabilities through public GitHub issues.

Instead, please use the GitHub Private Vulnerability Reporting feature through Security Advisories, or contact @nikosavola directly.

What to include in a report

To help me understand and fix the issue, please include as much information as possible:

• A description of the vulnerability and its potential impact.

• Steps to reproduce the issue (a minimal working example is highly appreciated).

• Any potential mitigations you’ve identified.

Process

        graph TD
    A[Vulnerability Report Received] --> B[Acknowledge Receipt]
    B --> C[Investigate & Confirm]
    C --> D[Develop & Test Fix]
    D --> E[Release New Version]
    E --> F[Credit Reporter in Release Notes]