We aim to keep PyDeepFlow up to date and secure. Please see below for the versions we currently support with security updates.

If you discover a security vulnerability, please do not open an issue on GitHub.

Instead, follow these steps:

1. Email the maintainer directly
2. Include the following details:
   • Description of the vulnerability
   • Steps to reproduce (if possible)
   • Potential impact
   • Any mitigation or workaround suggestions

⌛ We aim to respond to security reports within 72 hours.

We ask that you:

• Do not publicly disclose the issue until it has been resolved.
• Avoid testing vulnerabilities in a way that could disrupt services.
• Act in good faith and with respect for user data and privacy.

• We follow a coordinated disclosure approach.
• We appreciate responsible reporting and will publicly disclose the issue only after a fix has been released.

While using this project, we recommend you:

• Always run software in a secure and isolated environment.
• Keep your dependencies up to date.
• Avoid sharing sensitive API keys or credentials in .env or other public files.

We value the contributions from the community and encourage responsible disclosure to help keep PyDeepFlow safe and secure for all users.

• GitHub Security Advisories
• OpenSSF Best Practices
• OWASP Top 10