If you discover a security vulnerability in a repository created from this template, do not open a public issue.

This file is a starter policy and must be customized before the repository is used for a real project.

Choose one reporting channel and replace this section with real contact details:

1. GitHub private vulnerability reporting, if enabled for the repository
2. A monitored security email address
3. Another private intake process used by your organization

• Acknowledgement within a documented time window
• A fix or mitigation plan for critical issues within a documented time window
• Credit in the release notes, if appropriate and requested

All contributors should follow the security guidelines in CONTRIBUTING.md.