If you discover a security vulnerability in ReCoco, please report it to our security team:

Email: adam@knit.li

⚠️ Please do not file GitHub issues for security vulnerabilities as they are public! ⚠️

Please provide:

• A detailed description of the vulnerability
• Steps to reproduce the issue
• Any relevant logs, screenshots, or proof-of-concept code

We will acknowledge your report promptly and work with you to resolve the issue.

This policy covers security issues related to ReCoco open-source software.

• We aim to respond as soon as we can.
• Security fixes will be released as soon as practical after verification.

Thank you for helping us keep ReCoco secure!