If you discover a security vulnerability, please:

1. Do NOT open a public issue
2. Email: security@example.com (or open a private security advisory)
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Initial response: 48 hours
• Status update: 7 days
• Fix timeline: Depends on severity

When using NotificationKit:

• Never include sensitive data in notification content
• Use thread identifiers carefully
• Validate user info payloads
• Handle push tokens securely

Thank you for helping keep NotificationKit secure!