Skip to content

Security: imjustprism/holdon

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported versions

Only the latest published 0.x release receives security fixes. Pre-1.0 releases ship breaking changes freely. Track the latest tag.

Reporting a vulnerability

Use GitHub's private vulnerability reporting for this repository (Security tab → "Report a vulnerability"). Do not file public issues for unpatched flaws.

Please include:

  • holdon version (holdon --version) and platform
  • Minimal reproduction (commands, target URL, environment)
  • Impact assessment as you see it

We aim to acknowledge within 72 hours and publish a fixed release within 30 days for high-severity issues.

There aren't any published security advisories