Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately through one of these channels:

• GitHub's private vulnerability reporting ("Report a vulnerability" under the Security tab), or
• email security@mozilla.org.

Please include as much of the following as you can:

• the affected version (tabstack --version) and platform,
• a description of the issue and its impact,
• steps to reproduce, and a proof of concept if available.

We will acknowledge your report, keep you informed of progress, and credit you in the release notes unless you prefer otherwise.

This policy covers the tabstack CLI in this repository. Issues in the Tabstack API service itself should be reported to the Tabstack team directly.