librebar 0.1.0

Opinionated application foundation for Rust CLIs and services
Documentation
# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| latest  | :white_check_mark: |

## Reporting a Vulnerability

**Please do not report security vulnerabilities through public GitHub issues.**

Instead, please report them via one of the following methods:

### Option 1: GitHub Security Advisories (Preferred)

Use [GitHub's private vulnerability reporting](https://github.com/claylo/librebar/security/advisories/new)
to submit a report directly.

### Option 2: Email

Send an email to the maintainers with:

- A description of the vulnerability
- Steps to reproduce the issue
- Potential impact assessment
- Any suggested fixes (optional)

## What to Expect

- **Acknowledgment**: Within 48 hours of your report
- **Initial Assessment**: Within 7 days
- **Resolution Timeline**: Depends on severity and complexity

We will keep you informed of progress toward a fix and may ask for additional
information or guidance.

## Disclosure Policy

- We follow [coordinated disclosure]https://en.wikipedia.org/wiki/Coordinated_vulnerability_disclosure
- Security fixes will be released as soon as practical
- We will credit reporters in release notes (unless anonymity is requested)

## Scope

This security policy applies to:

- The librebar library
- Official distribution channels (crates.io, GitHub releases)

## Security Best Practices

When using librebar:

- Keep your installation up to date
- Verify checksums when downloading releases
- Report any suspicious behavior

Thank you for helping keep librebar secure!