We take the security of this project seriously. If you discover a security vulnerability, please follow the steps below.
Do not open a public issue for security vulnerabilities.
- Report privately by emailing the project maintainer at the contact address listed in the profile, or open a confidential GitHub Security Advisory.
- Include details about the vulnerability, steps to reproduce, and potential impact.
- Allow time for the maintainer to triage and patch the issue before public disclosure.
- Acknowledgment within 48 hours of your report.
- Status updates at least once per week until the issue is resolved.
- Credit in the release notes / advisory once the fix is published, if you wish.
| Version | Supported |
|---|---|
| v2.x | ✅ |
| < 2.0 | ❌ |
This policy covers the Portfolio repository and its v2 frontend. Third-party dependencies should be reported to their respective maintainers.