If you discover a security vulnerability in samoa, please report it responsibly.

Do not open a public issue.

Instead, please email security concerns to the maintainers directly or use GitHub's private vulnerability reporting feature.

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 7 days
• Resolution Target: Within 30 days for critical issues

Only the latest major version receives security updates.