# Security Policy

## Supported Versions

| Version | Supported          |
|---------|--------------------|
| 0.1.x   | Yes                |

## Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

1. **Do NOT open a public issue.**
2. Email **dperezcabrera@gmail.com** with:
   - Description of the vulnerability
   - Steps to reproduce
   - Potential impact
3. You will receive a response within 7 days.
4. A fix will be released as soon as possible, with credit to the reporter (unless anonymity is preferred).

## Scope

This policy covers the `pico-auth` application and its authentication/authorization logic.
