The Person is an educational tool. While we prioritize a fun and safe learning environment, we take security seriously. We encourage all contributors to follow secure coding practices.
If you discover a vulnerability, please use the "Report a vulnerability" button under Security on this repo's GitHub page.
As you learn Python and OOP, keep these security habits in mind:
- No Secrets: Never commit personal information, API keys, or passwords to the repository.
- Dependency Awareness: Be cautious when adding new third-party libraries. Stick to well-known packages and keep them updated.
- Sanitize Input: If you add a method that takes user input, ensure it doesn't execute unintended code.
We use GitHub Dependabot to automatically monitor and update our dependencies for known vulnerabilities.