diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..9a1f1fe --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,45 @@ +# Security Policy + +## Supported Versions + +Security updates are currently provided for the latest code available on the `main` branch. + +| Version | Supported | +| ------- | --------- | +| main | ✅ Yes | + +## Contact Details + +To report a security vulnerability in **LocalMind**, please contact the maintainer through one of the following channels: + +- 👤 Maintainer Profile: [Github](https://github.com/imDarshanGK) +- 💬 Contact the maintainer through any social links listed on the GitHub profile + +> Please **do not** open a public GitHub issue for security vulnerabilities. + +## Expected Response Time + +| Action | Timeframe | +| ------- | --------- | +| Acknowledgement of report | Within 48 hours | +| Status update | Within 7 days | +| Patch / fix release | Within 30 days | + +## Responsible Disclosure Policy + +We follow a **responsible disclosure** policy: + +- Please report vulnerabilities privately before any public disclosure +- We request an embargo period of 30 days to investigate and patch the issue +- After a fix is released, you are welcome to publish your findings +- We will credit reporters in release notes unless anonymity is requested +- We deeply appreciate the efforts of security researchers and contributors who help keep the project secure 🙏 + +## What to Include in Your Report + +- A clear description of the vulnerability +- Steps to reproduce the issue +- Affected versions or components +- Potential impact assessment +- Proof of concept, screenshots, or logs (if applicable) +- Any suggested fix (optional but appreciated) \ No newline at end of file