Security updates are applied to the latest maintained branch of 01cloud Payments.

Please do not report security issues in public GitHub issues.

Include the following details:

• A clear description of the vulnerability
• Steps to reproduce (or proof of concept)
• Impact assessment
• Affected versions/commit hashes (if known)
• Suggested remediation (optional)

• Acknowledgment: within 3 business days
• Triage: severity and impact assessment
• Remediation: fix development and validation
• Disclosure: coordinated release and advisory (if needed)

This policy covers vulnerabilities in this repository's source code, dependency usage, and configuration files.

Please give maintainers reasonable time to investigate and patch before any public disclosure. We appreciate coordinated disclosure and good-faith reports.