If you're reading this, it is likely because you take open source software security seriously. Thank you!

Unless otherwise specified, it is recommended to regularly update to the most recent version of this software package, and to review the security test results, including any Dependabot alerts listed under the Security tab of this GitHub repository, ideally automating this process and including an alerting feature.

Should you discover a novel security issue or vulnerability, kindly report your findings privately, either to [email protected], or with the Report a vulnerability feature under the Security tab of this GitHub repository.

Kindly provide sufficient detail to effectively address, if not resolve, the issue, as well as a means of contact should additional detail be required, and so that we may return our thanks!

These security guidelines were drafted by the reelyActive team and we invite you to adapt them for your own projects under a Creative Commons Attribution 4.0 International License.