# Security Policy

## Supported versions

Security fixes are applied to the latest released version.

## Reporting a vulnerability

Please do not open a public issue for a suspected security problem.

Use GitHub private vulnerability reporting for this repository.

## Scope

LLMock is a local mock server intended for development and CI usage. Security reports are still welcome, especially for:

- unsafe defaults
- accidental exposure beyond local development expectations
- dependency or packaging risks
- behavior that could surprise CI or shared development environments
