This project is actively maintained. The latest version is considered secure.

We take security seriously. If you discover a vulnerability, please report it privately.

Please do not open a public GitHub issue for security concerns.

Instead, email: security@example.com (TODO: replace with maintainer email)

We will respond within 48 hours and aim to resolve within 90 days.

During the disclosure window, please keep details confidential.

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested mitigations

We may award recognition (credit) for responsibly disclosed vulnerabilities, depending on severity.

Security updates will be released as patches on the main branch. We recommend keeping your deployments up to date.

• Deploy Streamlit apps behind authentication when appropriate
• Regularly update dependencies
• Avoid committing secrets to the repo
• Use environment variables for configuration

Adapted from standard GitHub security policy.