Project Memory is actively maintained on the main branch.
Please report vulnerabilities privately by emailing:
kloselyc@gmail.com
Include:
- affected component(s)
- reproduction steps
- impact assessment
- suggested remediation (optional)
We will acknowledge receipt within 72 hours and coordinate a fix before disclosure.
This policy covers:
- API auth and authorization
- secret/config handling
- dependency and supply-chain risks
- data isolation bugs across users/scopes