Where this file is silent, the laranail security policy applies.

Security fixes are provided for the latest released minor version of laranail/license-kit. Please keep your installation up to date.

If you discover a security vulnerability, please do not open a public issue. Instead, email security@simtabi.com with:

• a description of the vulnerability and its impact,
• steps to reproduce (proof of concept if possible),
• the affected version(s).

You will receive an acknowledgement within a few business days. We will work with you to validate the issue, prepare a fix, and coordinate a disclosure timeline. Please give us a reasonable window to release a fix before any public disclosure.

We appreciate responsible disclosure and will credit reporters who wish to be acknowledged.

Prefer GitHub private vulnerability reporting when you can: open it from this repository's Security tab. The report arrives attached to the repo with a draft advisory and a CVE request path already in place. Email is the fallback for anyone who would rather not use GitHub.