Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.1.x	Yes

Reporting a Vulnerability

Do not open a public issue for security problems.

Use GitHub Security Advisories to report privately.

Template Security Notes

Change default passwords in .env before deploying
Never commit .env files
Review SECRET_KEY, database credentials, and API tokens before production
Templates ship with development defaults — harden for production

There aren't any published security advisories