Security contact

To report a vulnerability, email cold.start001@gmail.com. Please describe what you found and how to reproduce it.

• Do not include live secrets, customer data, or anything that affects other visitors.
• Do not run load tests or automated abuse against the live service.
• Credible reports will get a reply. This is a personal demo, so there is no bounty programme.

Reports about the source code can also be sent privately through the repository's security advisory form once the repository is public.