Security

Report a vulnerability

SECURITY.md

Security Policy

Thanks for helping keep formatz secure.

Supported Versions

Security updates are provided for the latest active branch (main).

Reporting a Vulnerability

Please do not open public issues for security vulnerabilities.
Report privately via GitHub Security Advisories (preferred) or direct maintainer contact.
Include reproduction steps, impact, and suggested mitigation if available.

Response Targets

Initial acknowledgment: within 72 hours
Triage status update: within 7 days
Remediation timeline: based on severity and exploitability

Disclosure

We follow coordinated disclosure and will credit reporters when appropriate.

There aren't any published security advisories