This is the example & benchmark repo for django-mindoff. It is a demonstration project, not production software — but we still take security seriously, both here and (especially) in the framework itself.

• In the django-mindoff framework → report it against the framework, per its security policy. That's where a fix actually ships.
• In this example repo (e.g. an insecure default in the demo settings, a flaw in the benchmark harness, a leaked credential) → report it here using the steps below.

Only the latest state of this repo is supported, and only the latest django-mindoff release is supported upstream — please confirm on the newest versions first.

Email joe@mindoff.work. If you're unsure whether something counts, it's still fine to reach out.

Include whatever you have, ideally:

• What you found and why it matters
• How to reproduce it (steps or a small proof-of-concept)
• Expected impact
• Environment / dependency details

Please do not open a public issue or discussion while a report is being investigated — privately first is better for everyone.

🙏 Thanks for helping keep the project safe.