Thank you for helping keep Trendhora secure! This document outlines the guidelines for reporting security issues and best practices.

Only the latest version of this project is currently being supported with security updates.

If you discover a security vulnerability, please DO NOT create a public GitHub issue.

Instead, follow these steps:

1. Email the maintainer directly.
2. Provide a detailed description of the vulnerability.
3. Include steps to reproduce the issue or a proof-of-concept if possible.

⌛ We will acknowledge your report within 72 hours, investigate it thoroughly, and provide a timeline for the fix. Responsible disclosures may be publicly credited upon request.

We ask that you:

• Do not publicly disclose the issue until it has been resolved.
• Avoid testing vulnerabilities in a way that could disrupt services.
• Act in good faith and with respect for user data and privacy.

While using or contributing to this project, please:

• Avoid exposing sensitive data (e.g., API keys, credentials).
• Validate and sanitize all user inputs if you’re working on frontend/backend integrations.
• Keep your dependencies updated regularly.

We appreciate the community’s support in improving the security of Trendhora. Thank you for acting responsibly and helping make open source better and safer for everyone.

• GitHub Security Advisories
• OpenSSF Best Practices
• OWASP Top 10