Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

Do NOT open a public issue
Email the maintainer or use GitHub's private vulnerability reporting
Include a description of the vulnerability and steps to reproduce

Supported Versions

Version	Supported
1.x	Yes

Security Best Practices

When using this API:

Never commit your .env file or API keys to version control
Use unique API keys for each application
Enable rate limiting to prevent abuse
Run behind a reverse proxy (nginx/Caddy) in production
Use HTTPS in production environments

There aren’t any published security advisories