If you discover a security vulnerability, please do not open a public issue.

Instead, email ericksonlopezf@gmail.com with:

1. Description of the vulnerability
2. Steps to reproduce (or a proof-of-concept)
3. Impact assessment — what an attacker could achieve
4. Suggested fix (optional)

• Acknowledgement within 48 hours
• Resolution target within 14 days for critical issues
• Credit in the release notes (unless you prefer to remain anonymous)

This policy applies to the angular-enterprise-app repository. For vulnerabilities in backend dependencies, please report to the relevant repository:

• dotnet-enterprise-api
• dotnet-shared-kernel
• dapper-extensions-pg