# Security Policy

## Supported Versions

We currently support the following versions of **witr** with security updates:

| OS | Supported |
| ------- | --------- |
| macOS   | :white_check_mark: |
| Linux   | :white_check_mark: |
| Windows | :x: |

See our [Feature Compatibility Matrix](README.md#91-feature-compatibility-matrix) for more details.

## Reporting a Vulnerability

We take the security of **witr** seriously. If you believe you have found a security vulnerability, please report it to us responsibly.

**How to report:**

Use the "Report a vulnerability" button in the repository’s [Security](https://github.com/pranshuparmar/witr/security) tab on GitHub to submit your report privately. Only maintainers and the reporter will see the submission.

**What to include in your report:**

- A description of the vulnerability.
- Steps to reproduce the issue (including any sample code or configuration).
- Potential impact of the vulnerability.
- Any suggested mitigations or fixes.

## Our Response Process

1. **Acknowledgment**: We will acknowledge receipt of your report within 48 hours.
2. **Investigation**: We will investigate the report and determine the severity and impact.
3. **Fix**: If a vulnerability is confirmed, we will work on a fix and release a new version as soon as possible.
4. **Disclosure**: We will coordinate the disclosure of the vulnerability with you to ensure that users have time to update.

## Attribution

This security policy is based on standard open-source practices.
