The production site and the latest commit on main receive security updates. Historical
tags and branches are not supported.
Do not open a public issue for a suspected vulnerability. Use GitHub’s Report a
vulnerability button on the repository Security tab (private vulnerability reporting)
when available. If it is unavailable, email hello@techtroop.co with the subject
Security report.
Include the affected URL or component, reproduction steps, impact, and any suggested mitigation. Do not include sensitive user data. The maintainers aim to acknowledge a report within five business days, provide a status update within ten business days, and coordinate disclosure after a fix is available. Timelines may vary with severity and complexity.
Please make a good-faith effort to avoid privacy violations, service disruption, data destruction, and access beyond what is necessary to demonstrate the issue.