We currently provide security updates for the following versions:

We take security vulnerabilities seriously. If you discover a security issue, please follow these guidelines:

Please DO NOT report security vulnerabilities through public GitHub issues.

Instead, please report them to:

• Email: [email protected]
• GitHub Security Advisory: Create a private security advisory

When reporting a vulnerability, please include:

1. Description of the vulnerability
2. Steps to reproduce the issue
3. Potential impact and attack scenarios
4. Suggested fix (if you have one)
5. Your contact information for follow-up

• Initial Response: Within 48 hours
• Status Update: Within 7 days
• Fix Timeline: Depends on severity and complexity

1. Acknowledgment: We'll confirm receipt of your report
2. Investigation: We'll investigate and validate the issue
3. Fix Development: We'll develop and test a fix
4. Coordinated Disclosure: We'll coordinate the release and disclosure
5. Credit: We'll acknowledge your contribution (if desired)

This security policy applies to:

• The utopia_hotreload package
• Related infrastructure and documentation
• Security issues that affect user applications

The following are generally not considered security vulnerabilities:

• Issues in third-party dependencies (please report to the respective maintainers)
• Denial of service attacks requiring local system access
• Issues requiring physical access to the system

Thank you for helping keep Utopia Hot Reload and our users safe!