Please do NOT open a public GitHub issue for security vulnerabilities.

Instead, report them responsibly:

1. Email: ashis2489@gmail.com
   Subject line: [SECURITY] <brief description>

2. Include:

   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if you have one)

3. Response time:

   • Acknowledgement within 48 hours
   • Status update within 7 days
   • Fix timeline communicated as soon as assessed

Once a fix is released, the vulnerability will be disclosed publicly with credit given to the reporter (unless they prefer anonymity).

Thank you for helping keep this project secure! 🙏