Security Policy

Reporting Security Issues

If you discover any security issue in this repository, please adhear to the steps below:

Do not create a public GitHub issue. To help prevent a potential attack on Agora, we prefer notification of security vulnerabilities be sent directly to maintainors and not on publicly visible forms.
Email: Send an email to brian@freeagora.org with a description of the security issue and other information that can be used to help maintainors replicate the event. Use the subject line: [Security Issue] <Description of the issue>.
Response: You can expect a response within 48 hours acknowledging receipt of your email.
Coordination: We will work on, develop, and test a patch to ensure the security issue is not exploited.

We will provide regular updates on the progress of resolving the issue and an estimated timeline for the release of the fix.

We encourage all contributors, maintainers, and reporters to adhere to our Code of Conduct in all interactions related to this repository.

We would like to thank the students and staff that have worked on this project and all furter mainainers:

Thank you for helping us keep this repository safe and secure.