Security

SECURITY.md

Security Policy

Found a Security Problem?

Don't post it publicly. Tell me privately with:

What the problem is
How to see it
What could happen

I'll get back to you.

Security Rules

Your code must:

Never show secret info in error messages
Clean up all user data (HTML, text, etc)
Check all data coming in
Not have passwords or keys in the code
Not add packages with known problems

Error Messages

Use my error-overlay system. Show helpful messages but don't show how the system works inside.

Packages

Use npm audit to check for problems
Keep packages up to date
Tell us right away if you find security issues
Don't add weird or questionable packages

Code Review

I check every pull request for security. If there's a problem, I reject it.

Talk to Us

Instagram: @peakkofficial
Threads: @peakkofficial
Call: (66) 080-380-4449

Use private channels for security issues. Don't use public channels.

There aren't any published security advisories