We currently support security updates for the latest version of this project.

If you discover a security vulnerability in the code, please do not create a public issue.

Instead, contact us privately at:

📧 themayanutcompany@gmail.com
Subject: Security Vulnerability Report

Please include:

• a detailed description
• steps to reproduce
• browser/device information
• screenshots (if helpful)

We will acknowledge your message within 5 business days.

We ask that you:

• Do not publicly disclose vulnerabilities before we fix them
• Avoid testing that harms availability (e.g., DDoS)
• Do not attempt to access private user data
• Do not use automated scanning tools that overload the server

We will:

• Review and validate the issue
• Provide updates during the fix
• Credit you (optional)

This policy applies to:

• https://mayanut.com
• This GitHub repository
• All public-facing assets created by The MayaNut Company

Out of scope:

• Social media accounts
• Third-party platforms (e.g., GitHub Pages infrastructure)
• Physical security

We appreciate anyone who helps improve the security and stability of The MayaNut Company’s online presence!