Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities through GitHub Security Advisories:

https://github.com/menvil/rateguru/security/advisories/new

Include:

Affected feature or component.
Steps to reproduce.
Expected impact.
Any proof-of-concept details that help verify the issue.

PGP

No project PGP key is published yet. If encrypted disclosure becomes required, request a secure contact path through the advisory.

Disclosure Timeline

Initial acknowledgement target: within 3 business days.
Triage target: within 7 business days.
Fix and coordinated disclosure target: depends on severity and scope.

Please allow maintainers time to investigate and release a fix before public disclosure.

There aren't any published security advisories