# Security Policy
## Reporting a Vulnerability
We take the security of `retch` seriously. If you believe you have found a security vulnerability, please do **not** open a public issue. Instead, please report it privately.
### Reporting Process
Please use GitHub's private security reporting by "Report a vulnerability" button above.
*Note: Since this is a personal project, please allow for a few days for a response.*
### What to Expect
- You will receive an acknowledgment of your report within 48-72 hours.
- We will work with you to understand and validate the vulnerability.
- Once a fix is ready, we will coordinate a release and provide credit for your discovery if you wish.
Thank you for helping keep `retch` secure!