14 lines (11 loc) · 334 Bytes

Security Policy

Reporting vulnerabilities

Report privately to maintainers before public disclosure.

Please include:

affected component/version,
reproduction details,
expected impact.

Secret handling

Do not commit .env with real tokens.
Keep only .env.example in git.
Rotate exposed credentials immediately.