Please do not report security vulnerabilities in public issues.

Email the maintainers through the current Launch Pad Foundation security contact listed in the repository's private maintainer configuration. Do not include credentials, customer data, payment details, or exploit code in an initial report.

If a report may affect a deployed event, contact that event's operator directly as well; this repository is a template and has no shared production backend. Each remixer is responsible for securing their own deployment, secrets, database, storage, and integrations.