# Security Policy

## Supported Versions

All current (pre-1.0.0) versions are supported with security updates.

## Reporting a Vulnerability

If you discover a security vulnerability in this project, please use the **“Report a vulnerability”** button in the **Security** tab of this repository to submit it privately via GitHub’s built-in form.

## Response Timeline

I will **respond within 7 days** of receiving your report, acknowledging or requesting more details.

## What Happens Next?

- If your report is **accepted**, I’ll work with you privately to coordinate a fix and may publish a formal security advisory once resolved.
- If your report is **declined**, I’ll let you know why—typically if it's not a security issue or it’s out of scope.

Thank you for helping keep this project secure!
