Report vulnerabilities via GitHub Security Advisories on this repo, or contact the maintainer on the GitHub profile.
Do not open public issues for active exploits.
| Version | Supported |
|---|---|
main (0.2.x-SNAPSHOT) |
Yes — best effort |
Full posture (demo secrets, JWK file, OTP logging, rotation) →
docs/booklet.md (§15 Security posture)
Edit the booklet for security narrative; keep this file as the GitHub security policy entry point.