We take the security of every Simtabi open source project seriously.

Please email opensource@simtabi.com with the details. Do not open a public issue for a suspected vulnerability.

Include, where possible:

• The affected repository and version.
• A description of the issue and its impact.
• Steps to reproduce, or a proof of concept.

You will receive an acknowledgement within a few business days. We will keep you informed as we investigate, and we will credit you in the fix's release notes unless you prefer otherwise.

This policy applies to every public repository in the simtabi organization that does not carry its own SECURITY.md. A repository's own policy, when present, takes precedence.