Security policy

Reporting a vulnerability

Use GitHub private vulnerability reporting for sensitive findings. Do not disclose credentials, private records, confidential source or exploitable details in public issues or pull requests.

Include the affected version or commit, relevant file or component, impact and a minimal reproduction with synthetic data. Remove private paths, tokens and personal information from logs and screenshots. Use repository issues for ordinary bugs and documentation corrections.

Scope and maintenance

The README and component guides describe supported platforms, versions and known limitations. This policy does not establish an additional support lifetime, response deadline or guarantee that every example is tested on every platform.

Run examples only against systems and data you are authorized to use. Review commands that change files, services, devices or cloud resources before execution. A documentation or metadata check does not validate application security.