# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Razor2-Client-Agent, please report
it responsibly.

**Please do NOT open a public GitHub issue for security vulnerabilities.**

Instead, report security issues to:

- **Email**: toddr@cpan.org
- **GitHub**: Open a [private security advisory](https://github.com/toddr/Razor2-Client-Agent/security/advisories/new)

## What to include

- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Any potential impact assessment

## Response timeline

- We will acknowledge receipt within 72 hours
- We aim to provide an initial assessment within 1 week
- Fixes will be released as soon as practical

## Supported versions

Only the latest release on CPAN is actively maintained.
