If you discover a security vulnerability in Nodalite, please report it privately by emailing me@akkil.dev.
Please do not open a public GitHub issue for security vulnerabilities.
You should receive a response within 48 hours. If you don't, please follow up to ensure your message was received.
- A description of the vulnerability
- Steps to reproduce it
- The affected package(s) and version(s)
- Any potential impact you've identified
This security policy covers all packages in the @nodalite/* namespace.
Only the latest published version of each package receives security patches. Always use the latest version.
We believe in coordinated disclosure. We will work with you to understand the issue and release a fix before public disclosure.