If you discover a security vulnerability in this project, please report it responsibly. Do not open a public issue.

Use GitHub Security Advisories to report vulnerabilities privately.

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Assessment: Within 7 days
• Fix timeline: Depends on severity; critical issues prioritized

Security updates are applied to the latest release on the default branch.

This project uses automated security scanning:

• gitleaks — secrets detection in commits
• Bandit — Python SAST analysis
• pip-audit — supply chain vulnerability scanning
• SonarCloud — continuous code quality and security analysis