Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
0.1.x	✅

Reporting a Vulnerability

Do not open public issues for security vulnerabilities.

Email security concerns to: security@yourdomain.com

Include:

Description of the vulnerability
Steps to reproduce
Potential impact
Suggested fix (if any)

We will respond within 48 hours.

Security Best Practices

Keep dependencies updated
Use strong SECRET_KEY in production
Enable HTTPS for all services
Rotate API keys regularly
Review Clerk/Polar security settings

There aren’t any published security advisories