Please do NOT create public GitHub issues for security vulnerabilities.

To report a security vulnerability, please email security@streamline.dev with:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

We will acknowledge receipt within 48 hours and provide a detailed response within 7 days.

When a security vulnerability is reported:

1. We will confirm receipt within 48 hours
2. We will investigate and determine impact within 7 days
3. We will develop a fix and coordinate disclosure
4. Security fixes will be released as patch versions
5. Public disclosure will occur after the fix is available

For security-related inquiries, please email security@streamline.dev.