This project follows semantic versioning. Security fixes are released against the latest published 1.x version on npm. Please make sure you are on the most recent release before reporting.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them privately using either of the following:

1. GitHub private advisory (preferred): open a report at Security advisories. This keeps the discussion private until a fix is released.
2. Email: ajibadehammed@gmail.com with the subject line SECURITY: expo-video-encoder.

Please include as much of the following as you can:

• A description of the issue and the impact you believe it has.
• The version of expo-video-encoder affected.
• Steps to reproduce, or a proof of concept.
• The platform (iOS or Android), OS version, device, and Expo/React Native versions.

• We aim to acknowledge your report within 3 business days.
• We will confirm the issue, determine its severity, and keep you updated on progress toward a fix.
• Once a fix is released, we will credit you in the release notes unless you prefer to remain anonymous.

Thank you for helping keep this project and its users safe.