We take security seriously, these repositories are maintained by Arvion Technologies and are used in production by our clients.

Please do not open a public issue for security problems.

Email hello@arviontech.net with:

• the affected repository and version/commit,
• a description of the issue and its impact,
• reproduction steps or a proof of concept,
• any suggested remediation.

We acknowledge reports within 2 business days, keep you updated until the issue is resolved, and credit reporters in the release notes unless you prefer to stay anonymous.

The main branch is the supported line. Security fixes are released as patch releases and documented in the repository's release notes.

In scope: vulnerabilities in the code and default configuration of this repository. Out of scope: issues in third-party services, social engineering, and findings that require a compromised developer machine.