maatify/mongo-activity

The following versions of maatify/mongo-activity receive security updates:

If a security issue affects older versions, updating to the latest release is required.

If you discover a security vulnerability, please DO NOT open a public GitHub issue.

Instead, contact the maintainer privately:

security@maatify.dev

or mohamed@maatify.dev

When reporting, please include:

• A clear description of the vulnerability
• Steps to reproduce
• Expected behavior vs actual behavior
• Potential impact
• Any relevant logs, payloads, or PoC
• A suggested fix (optional)

You will receive a response within 24–48 hours.

To protect the ecosystem:

• Do not publicly reveal the issue before a fix is released.
• The maintainer will work with you to verify, patch, and release a secure update.
• You may be credited in the release notes unless anonymity is requested.

Using this library safely requires:

• Disable public access
• Use strong authentication
• Restrict network access to trusted hosts
• Enable TLS where possible

Ensure your .env file is not committed to Git and includes:

MONGO_URI=your-secure-uri
MONGO_DB_ACTIVITY=...
MONGO_DB_ACTIVITY_ARCHIVE=...

Logged activity may include:

• User IDs
• Admin actions
• Sensitive entity references

Make sure your access control restricts who can query the logs.

When a vulnerability is confirmed:

1. Issue is replicated and validated privately
2. Patch is developed and tested
3. Security update is tagged and released
4. Advisory is published in GitHub Security Advisories
5. Responsible reporters may be credited

By using this package, you agree to:

• Avoid exploiting discovered vulnerabilities
• Report them responsibly
• Refrain from publicly disclosing without coordination

🧩 maatify/mongo-activity— Unified Data Connectivity & Diagnostics Layer
© 2025 Maatify.dev • Maintained by Mohamed Abdulalim (@megyptm)

© 2025 Maatify.dev
Engineered by Mohamed Abdulalim (@megyptm) — https://www.maatify.dev

📘 Full documentation & source code:
https://github.com/Maatify/data-adapters

_{Built with ❤️ by Maatify.dev — Unified Ecosystem for Modern PHP Libraries}