# Security Policy

## Reporting a Vulnerability

We take the security of `retch` seriously. If you believe you have found a security vulnerability, please do **not** open a public issue. Instead, please report it privately.

### Reporting Process

Please use GitHub's private security reporting by "Report a vulnerability" button above. 

*Note: Since this is a personal project, please allow for a few days for a response.*

### What to Expect

- You will receive an acknowledgment of your report within 48-72 hours.
- We will work with you to understand and validate the vulnerability.
- Once a fix is ready, we will coordinate a release and provide credit for your discovery if you wish.

Thank you for helping keep `etr` secure!
