# Security Policy

## Supported Versions

The following versions of the EntroPy Password Generator are currently supported with security updates. Unsupported versions will not receive patches for vulnerabilities.

| Version | Supported          |
|---------|--------------------|
| 1.2.x   | :white_check_mark: |
| 1.1.x   | :x:                |
| 1.0.x   | :white_check_mark: |
| < 1.0   | :x:                |

## Test PyPI Usage
The Test PyPI release of EntroPy Password Generator is intended for testing purposes only and should not be used in production environments. For production use, please install the package from the official PyPI repository.

## Reporting a Vulnerability

If you discover a security vulnerability in the EntroPy Password Generator, please report it promptly to ensure the safety of all users. Follow these steps:

1. **Where to Report**: Send an email to [Contato](mailto:dean-grumbly-plop@duck.com) with a detailed description of the vulnerability. Avoid public disclosure until the issue is resolved.
2. **Expected Response Time**: You will receive an acknowledgment within 48 hours. A detailed update on the assessment and resolution plan will be provided within 7 business days.
3. **Resolution Process**: 
   - If the vulnerability is accepted, we will prioritize a fix based on severity and deploy it in the next supported release.
   - If the vulnerability is declined (e.g., not reproducible or out of scope), you will be notified with an explanation.
4. **Confidentiality**: Please refrain from disclosing the vulnerability publicly until we have addressed it and provided clearance for disclosure.

We appreciate your cooperation in responsibly reporting vulnerabilities to protect the EntroPy Password Generator community.
