We take the security of this repository seriously. If you discover a security vulnerability, please report it responsibly.
Please do not open a public GitHub issue for security vulnerabilities.
Instead, use one of the following methods:
-
GitHub Security Advisories
Use the "Report a vulnerability" feature available in the repository’s Security tab. -
Email
Send a detailed report to: rainxch.dev@gmail.com
To help us assess and resolve the issue quickly, please include:
- A clear description of the vulnerability
- Steps to reproduce the issue
- Proof of concept (PoC), if available
- Affected files, endpoints, or components
- Potential impact of the vulnerability
We aim to follow this general timeline:
- Acknowledgement: Within 48 hours
- Initial assessment: Within 5 business days
- Fix or mitigation: Based on severity and complexity
Timelines may vary depending on the nature of the vulnerability.
We kindly request that you practice responsible disclosure and avoid sharing details publicly until the vulnerability has been addressed or a fix has been released.
Contributors are encouraged to:
- Follow secure coding practices
- Avoid committing secrets or credentials
- Use dependency scanning and security tools where possible
- Review pull requests for potential security issues
We appreciate the efforts of the security community and responsible researchers who help keep this project secure.