Do not report security vulnerabilities in a public issue, pull request, or community chat.

Email oss@nomyr.io with:

• a concise description of the issue and its potential impact;
• the affected URL, commit, or component;
• safe reproduction steps or a proof of concept;
• a secure way to contact you.

Do not include live credentials, personal data, customer data, or private infrastructure details. The maintainers will acknowledge the report, coordinate validation, and agree on disclosure timing with the reporter.

This policy covers the website code in this repository. Reports about the Nomyr product should follow the main repository security policy.