If you believe you have found a security or privacy issue in this project, please report it privately.

• email: ui@put.io

Please do not open a public issue for vulnerabilities or sensitive reports.

Useful reports usually include issues involving:

• authentication, authorization, or session handling
• token, secret, or credential exposure
• privilege escalation or access-control bypass
• private or user data exposure
• unsafe request handling or injection issues

• test only against accounts, environments, and data you control
• avoid destructive behavior, service disruption, or automated high-volume testing
• do not attempt social engineering, physical attacks, or denial-of-service testing

This repo does not currently publish a separate supported-version matrix.

Please report issues against the latest published SDK version, or against main when the issue is only reproducible there.

Please allow a reasonable amount of time to investigate and fix the issue before sharing details publicly.

If the report is valid, we will work on a fix and coordinate disclosure as appropriate.