Please do NOT open a public GitHub issue for security vulnerabilities.

If you discover a security vulnerability in any Mininglamp-OSS project, please report it responsibly:

1. Email: Send a detailed report to security@mininglamp.com
2. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Affected repository and version/commit
   • Potential impact assessment
   • Any suggested fix (optional but appreciated)

Each repository documents its own supported versions. As a general policy, only the latest release and the main branch receive security updates.

• We follow coordinated disclosure: we ask reporters to keep vulnerabilities confidential until a fix is available.
• We will credit reporters in the security advisory (unless anonymity is requested).
• Critical vulnerabilities will be patched and disclosed as quickly as possible.

This policy applies to all public repositories under the Mininglamp-OSS organization.

Thank you for helping keep Mininglamp-OSS and its users safe.