# Security Policy

## Reporting a Vulnerability

Please do not report security-sensitive issues in public GitHub issues,
discussions, or pull requests.

Preferred reporting channel:

- Use GitHub Private Vulnerability Reporting, if enabled for this repository:
  go to the repository's **Security** tab and choose **Report a vulnerability**.

Fallback private contact:

- Email: proximitygraphs.security@gmail.com

When reporting a vulnerability, please include:

- A clear description of the issue.
- Steps to reproduce it.
- A minimal code example, if applicable.
- The affected version or commit.
- Any known impact or workaround.

## Supported Versions

Security fixes are provided for the latest released version of the package.

| Version | Supported |
| ------- | --------- |
| latest | Yes |
| older releases | No guaranteed support |

## Response Expectations

- We will acknowledge receipt as soon as practical.
- We will work with the reporter to understand impact and reproduction steps.
- If the issue is confirmed, we will prepare a fix and coordinate disclosure.
- Please avoid public disclosure until a fix or mitigation is available.

## Current Status

The current monitored private contact is:

- proximitygraphs.security@gmail.com