| Version | Supported |
|---|---|
| 0.2.x | ✅ |
| < 0.2 | ❌ |
Please report security vulnerabilities by opening a GitHub Security Advisory or by emailing the maintainers privately.
Do not open public issues for security vulnerabilities.
- Acknowledgment: Within 48 hours
- Initial assessment: Within 7 days
- Fix or mitigation: Depends on severity; critical issues prioritised
- Do not commit API keys, tokens, or credentials to the repository
- Use environment variables or
citysense.toml(excluded from version control) for secrets - Keep dependencies updated:
pip install -U -e ".[dev]"