We actively maintain and provide security updates for the following:

We take security seriously. If you discover a security vulnerability in any ops4life project, please report it responsibly.

1. Do NOT open a public issue for security vulnerabilities
2. Use GitHub Private Vulnerability Reporting
3. Or contact maintainers directly via GitHub

• Description of the vulnerability
• Steps to reproduce
• Affected project(s) and version(s)
• Potential impact
• Suggested fix (if any)

We appreciate responsible disclosure. Contributors who report valid security issues will be:

• Credited in the security advisory (unless anonymity is preferred)
• Thanked publicly in release notes

When contributing to ops4life projects:

• ❌ Never commit secrets, API keys, or credentials
• ❌ Never hardcode sensitive information
• ✅ Use environment variables for secrets
• ✅ Follow least privilege principles
• ✅ Keep dependencies updated

For general security questions, open a discussion in the Q&A category.