Security

SECURITY.md

Security Policy

Supported Versions

Currently, Nori Code only provides security support for the latest released version.

Reporting a Vulnerability

We take security seriously. Please do not open a public issue for security vulnerabilities.

Preferred channel:

GitHub Security Advisories — (TBD) (private disclosure, tracked with the codebase)

Alternative channel:

Email: (TBD) (please include "[security]" in the subject)

What to Include

Affected version (output of nori --version)
Reproduction steps
Impact assessment
Any suggested mitigation

Our Response

We will acknowledge your report and provide an initial assessment as soon as we can.

Public Disclosure

We will coordinate with you on disclosure timing once a fix is ready.

There aren't any published security advisories