Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

DO NOT open a public GitHub issue
Email: Site@hotmail.com
Subject: [SLP Security] Brief description

Response: Acknowledgment 48h, status 7d, resolution 30d.

Scope

In scope: XSS, localStorage data exposure, dependency vulnerabilities. Out of scope: NIST/CIS content accuracy, browser-specific limitations.

Data Privacy

All data stays in browser localStorage. No external servers contacted.

There aren't any published security advisories