Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in ChainBreaker, please report it responsibly:

Do NOT open a public GitHub issue
Use GitHub's private vulnerability reporting
Include: description, steps to reproduce, potential impact

Response Timeline

Acknowledgment: Within 48 hours
Assessment: Within 1 week
Fix: Depends on severity

Scope

ChainBreaker CLI tool
ChainBreaker Python package
Documentation (if it contains security-relevant info)

Out of Scope

Third-party packages analyzed by ChainBreaker
Registry API vulnerabilities

There aren't any published security advisories