This is a template/educational repository, but security issues in the patterns it teaches matter — people copy this code into production.

Please report vulnerabilities via GitHub private vulnerability reporting. Do not open public issues for security problems.

You can expect an initial response within a week.

• Flaws in the demonstrated patterns (e.g. the idempotency or outbox implementation) that would be exploitable when copied into real services.
• Dependency vulnerabilities are handled automatically via Dependabot.