If you discover a security vulnerability in this project, please report it by opening a GitHub issue with the label security.

For sensitive issues that shouldn't be disclosed publicly, contact the repository owner directly through GitHub.

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 7 days
• Fix/Update: As soon as possible, depending on severity

• Never commit API keys, passwords, or tokens
• Use .env for all sensitive configuration
• Keep dependencies updated
• Follow Laravel security best practices