| Version | Supported |
|---|---|
| 3.9.x | ✅ |
| < 3.0 | ❌ |
We take security seriously. If you discover a security vulnerability within Laravel API Toolkit, please follow these steps:
-
Do NOT disclose the vulnerability publicly until it has been addressed.
-
Email the maintainer directly at [email protected] or [email protected] with:
- A description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any suggested fixes (optional)
-
Response Time: You can expect an initial response within 48 hours. We will work with you to understand and address the issue promptly.
-
Disclosure: Once the vulnerability is fixed, we will:
- Release a security patch
- Credit you in the release notes (unless you prefer to remain anonymous)
- Publish a security advisory if appropriate
When using this package:
- Always use the latest stable version
- Keep your Laravel installation up to date
- Follow Laravel's security best practices
- Validate and sanitize all user input before passing to API responses
- Use HTTPS in production environments
Thank you for helping keep Laravel API Toolkit secure!