If you discover a security vulnerability in Seams.Analyzers, please report it responsibly:

1. Do not open a public issue
2. Email the maintainer directly or use GitHub's private vulnerability reporting feature
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 7 days
• Resolution: Depends on severity and complexity

This security policy applies to:

• The Seams.Analyzers NuGet package
• The source code in this repository

Since this is a Roslyn analyzer that runs at compile-time, security concerns are limited, but we take all reports seriously.