diff --git a/security.md b/security.md deleted file mode 100644 index e0599cab..00000000 --- a/security.md +++ /dev/null @@ -1,38 +0,0 @@ -# Security Policy - -## Reporting a Vulnerability - -If you discover a security vulnerability in pocketpy, please report it responsibly. - -Do NOT open a public GitHub issue for security-sensitive bugs. - -Instead, report the issue privately by contacting the maintainers with: - -- A clear description of the vulnerability -- Steps to reproduce the issue -- A minimal proof-of-concept (if possible) -- Environment details (OS, compiler, version, build flags) - -Examples of security issues include: - -- Heap-buffer-overflow -- Stack-buffer-overflow -- Use-after-free -- Out-of-bounds read/write -- Crashes triggered by crafted input - -## Response Process - -After receiving a report, maintainers may: - -1. Confirm and reproduce the issue -2. Investigate and prepare a fix -3. Release a patched version -4. Publicly disclose the issue after it is resolved - -Please allow reasonable time for investigation and remediation before public disclosure. - -## Supported Versions - -Security fixes are typically applied to the latest development version. -Older versions may not receive patches. \ No newline at end of file