Security

SECURITY.md

Security Policy

If you find a security issue in an Off By One project, please report it responsibly.

Reporting

Do not open a public issue for sensitive vulnerabilities.

Contact the maintainer through GitHub first with:

affected repository
short description
steps to reproduce
possible impact

Scope

Security reports are especially important for:

authentication
private user data
tokens or API keys
file imports and exports
browser storage
AI workflow logging

Response

We will try to acknowledge valid reports quickly and keep the fix focused.

There aren't any published security advisories