# Security Policy

## Supported Versions

Only the latest stable release of this project receives security updates. Older versions are not supported.

| Version  | Supported          |
| -------- | ------------------ |
| latest   | :white_check_mark: |
| < latest | :x:                |

## Reporting a Vulnerability

If you discover a security vulnerability, please report it via [GitHub Security Advisories](https://github.com/asepharyana/asepharyana-hub/security/advisories).

Do **not** report security vulnerabilities via public GitHub issues.

Please include the following information in your report:

- A description of the vulnerability and the potential impact
- Steps to reproduce the issue
- The version(s) affected
- Any possible mitigations you have identified

## Disclosure Policy

- We will acknowledge receipt of your report within **48 hours**.
- We will investigate the issue and provide an estimated timeline for a fix.
- Once a fix is released, we will publish a security advisory and credit the reporter (if desired).
- We ask that you allow us **90 days** from the date of the report to release a fix before any public disclosure.