If you discover a security vulnerability in Duskmeter, please do not open a public issue. Instead, report it privately by emailing the project maintainers.

We will acknowledge receipt within 48 hours and provide an initial assessment within 5 business days. We will keep you informed as the fix progresses.

• A description of the vulnerability
• Steps to reproduce
• Impact assessment (if known)
• Any suggested mitigations

This security policy covers the Duskmeter codebase hosted in this repository. It does not cover third-party dependencies — please report those to their respective maintainers.