Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.x.x	✅

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly.

How to Report

Do NOT create a public GitHub issue
Send details to: [Telegram Handle] (Telegram)
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)

What to Expect

Acknowledgment: Within 24 hours
Initial Response: Within 48 hours
Resolution: ASAP depending on severity

Security Best Practices

API Keys

Never commit API keys to repository
Use environment variables
Rotate keys regularly

Dependencies

Keep npm packages updated
Review new dependencies
Run npm audit regularly

Data Protection

Encrypt sensitive data at rest
Use HTTPS for all connections
Implement least privilege access

Last Updated: 2026-05-17

There aren't any published security advisories