The security of our projects is a top priority. If you believe you've found a security vulnerability in any of The No Hands Company's repositories, please report it to us as described below.

Please do not report security vulnerabilities through public GitHub issues.

Instead, please report them to us privately by:

1. Emailing us at [email protected]
2. Include as much information as possible about the vulnerability:
   • The project and file affected
   • Steps to reproduce the issue
   • The potential impact of the vulnerability
   • Any possible mitigations

Once we receive a security report, the following process will be followed:

1. We will acknowledge your report within 2 business days.
2. Our security team will investigate the issue and determine its impact and severity.
3. We will develop a fix and test it internally.
4. We will release the fix according to our release schedule:
   • Critical vulnerabilities: Immediate patch release
   • High severity: Within 7 days
   • Medium/Low severity: Next scheduled release

We provide security updates for the following versions of our projects:

When contributing to our projects, please follow these security best practices:

1. Keep dependencies updated to their latest secure versions
2. Validate all user inputs
3. Follow the principle of least privilege
4. Do not commit sensitive information (tokens, passwords, etc.)
5. Use strong encryption for sensitive data
6. Implement proper error handling

We employ several security measures in our projects:

1. Automated vulnerability scanning
2. Regular dependency updates
3. Code reviews with security focus
4. Static code analysis

We believe in responsible disclosure. Security issues will only be publicly disclosed after a fix has been released and users have had reasonable time to update their installations.

Thank you for helping us keep The No Hands Company projects secure!