/ contexa / SECURITY.md
Swadhin Biswas security: add vulnerability reporting policy and response timeline · 3/5/2026
864df05
38 lines · 971 Bytes
Raw Download

Security Policy

Supported Versions

Version Supported
0.1.x :white_check_mark:
< 0.1.0 :x:

Reporting a Vulnerability

If you discover a security vulnerability in contexa, please report it responsibly by emailing [email protected] with the following information:

  • Description of the vulnerability
  • Steps to reproduce
  • Affected language(s) and version(s)
  • Impact assessment

Please do NOT open a public issue for security vulnerabilities. Responsible disclosure helps protect all users of the project.

Response Timeline

  • Acknowledgment — within 48 hours of receiving the report
  • Initial assessment — within 1 week
  • Fix and disclosure timeline — agreed upon with the reporter on a case-by-case basis

Scope

This security policy covers all 7 language implementations of contexa:

  • Python
  • JavaScript
  • Rust
  • Go
  • Zig
  • Lua
  • Elixir