If you discover a security vulnerability in TheAppManager, please report it responsibly.

Please do NOT open a public GitHub issue for security vulnerabilities.

Instead, please use GitHub's private vulnerability reporting to submit your report, including:

• A description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

You can expect an initial response within 48 hours. We will work with you to understand and address the issue before any public disclosure.

Security updates will be released as patch versions on NuGet. We recommend always using the latest version.

This policy covers the TheAppManager NuGet package and its source code hosted at phmatray/TheAppManager.