If you discover a security issue, please report it responsibly:

1. Preferred: Open a GitHub private security advisory on this repository.
2. Alternative: Open a GitHub Issue only if the report is not sensitive.

Please do not disclose security issues publicly before a fix is available.

This policy covers the Jugend UI repository, demo site, and shadcn registry endpoints served from the project.

We aim to acknowledge reports within a reasonable timeframe and will work on fixes as capacity allows.