We currently support the following versions of the Standup Desk Timer Widget:

If you discover a security vulnerability, we greatly appreciate your effort in responsibly disclosing it to us. Please do not publicly disclose the issue until we have addressed it.

To report a vulnerability, please follow these steps:

1. Contact Us:

   • Open a private security advisory via the GitHub repository's Security tab.

2. Include the Following Details:

   • A clear description of the vulnerability.
   • Steps to reproduce the issue (if possible).
   • Any potential impact or exploit scenarios.

3. Expected Response Time:

   • We aim to acknowledge receipt of security reports within 14 days.
   • If the issue is confirmed, we will provide an estimated timeline for a fix.

We thank the community for helping us improve the security of our project. Your responsible disclosures are invaluable.