Security policy

Supported versions

Security fixes are provided for the latest published version of @bmhien/bot.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting on the repository Security tab:

Include the affected version, impact, reproduction steps, and any suggested mitigation. Do not include real Telegram bot tokens or user data.