Security

SECURITY.md

Security Policy

Supported versions

Only the main branch / live https://rnui.dev site is supported.

Reporting a vulnerability

Email mrpmohiburrahman@gmail.com with the subject SECURITY: rnui.dev. Please include:

A description of the issue.
Steps to reproduce.
Impact assessment.

We will acknowledge within 72 hours and aim to patch within 14 days for high-severity issues.

Please do not open public issues for security vulnerabilities.

Scope

The Next.js site at rnui.dev.
The data ingestion / thumbnail scripts in scripts/.
The Codex-triage GitHub Action (once landed).

Out of scope

Third-party repos linked from the catalog. Report those upstream.
The build / deploy infrastructure on Vercel.

There aren't any published security advisories