We take security seriously. If you discover a vulnerability, please follow the responsible disclosure process below.

This repository has GitHub Private Vulnerability Reporting enabled. You can report vulnerabilities directly through GitHub's Security Advisories feature.

Alternatively, you may email the maintainers directly at the contact address listed in the repository profile.

When reporting a vulnerability, please include:

• Description: A clear description of the vulnerability
• Steps to Reproduce: Detailed steps to reproduce the issue
• Impact: The potential impact if exploited
• Affected Versions: Which versions are affected
• Suggested Fix: If you have a suggestion for remediation

• Acknowledgment: Within 48 hours of receiving your report
• Initial Assessment: Within 7 days
• Fix and Disclosure: Within 30 days, depending on severity and complexity

This repository uses the following security practices:

• Static Analysis: bandit is run in CI to detect common Python security issues
• Dependency Auditing: pip-audit checks for known vulnerabilities in dependencies
• Pre-commit Hooks: Security-focused linting runs before each commit

Thank you for helping keep Programmatic-PID secure.