We are committed to ensuring the security of our project and responding promptly to reports of potential vulnerabilities. If you discover an issue related to security, please follow the instructions below.
If you have found a vulnerability or suspect that there is a security-related issue in the project:
- Do not create a public issue. This may lead to unwanted disclosure of information.
- Contact us through private communication channels:
- Email: voral.adm@gmail.com
Please provide as much information as possible so we can quickly understand and fix the issue:
- A description of the vulnerability.
- Steps to reproduce the problem.
- The version of the package where you discovered the issue.
- Screenshots, logs, or other materials that may help us investigate.
- We review each report within 1–2 business days.
- If the issue is confirmed, we begin working on a fix.
- After the fix is released, we publish information about the issue and its resolution (unless it compromises confidentiality).
We adhere to the principles of responsible vulnerability disclosure. Please:
- Do not publicly disclose information about the issue until it has been fixed.
- Allow us time to analyze and resolve the issue.
We thank everyone who helps make our project more secure. If you report a significant vulnerability, we may offer you:
- Public acknowledgment in our list of contributors.
Thank you for your contribution to the security of our project!