We take the security of LibreCosta projects seriously.

If you discover a potential security vulnerability, please report it privately rather than opening a public GitHub issue.

Contact: contact@librecosta.com

For repositories with GitHub Private Vulnerability Reporting enabled, you may also use the repository's private security reporting feature.

Please include the affected project, a description of the issue, and reproduction steps when possible.

We appreciate responsible security research and ask that you allow reasonable time for investigation and remediation before public disclosure.

This policy applies to actively maintained public LibreCosta repositories unless a repository provides its own security policy.

LibreCosta does not currently operate a public bug bounty program.