If you discover a security issue or vulnerability, please do not open a public GitHub issue.
Instead, send a detailed email to human@checkmarkdevtools.dev (yes, it’s checked!).
Include:
- Steps to reproduce (if possible)
- Potential impact
- Your contact info (so I can give you credit and say thanks)
- I’ll acknowledge receipt within 48 hours (unless the server melts).
- Verified issues will be triaged ASAP.
- If you’d like, you’ll be credited in the release notes for your contribution - plus, snacks or memes upon special request as a thank you!
- All dependencies scanned regularly for CVEs
- No hardcoded secrets—ever
- Security best practices followed in code and docs (see here)
Thank you for helping keep this project safe for everyone!
This file was generated with ChatGPT as directed by Ashley Childress