Security

.github/SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please do not open a public issue. Instead, email security concerns to the maintainer directly.

Supported Versions

Version	Status
1.x	Current

Security Practices

All dependencies are scanned via Dependabot
Commits are linted and formatted automatically
Code is linted with xo (including security rules)
Tests must pass before merge
No secrets or credentials in repositories

Dependencies

We actively monitor and update dependencies. Security patches are prioritized and released as patch versions.

There aren't any published security advisories