# Security policy

## Reporting a vulnerability

Please do not report security vulnerabilities through public GitHub issues,
discussions, or pull requests.

Report them privately through GitHub's vulnerability reporting form for this
repository:

https://github.com/thruputchain/thruput-sdk-ts/security/advisories/new

Include a description of the issue, the affected versions, and steps to
reproduce it. We will acknowledge the report, keep you informed of progress,
and credit you in the advisory unless you ask otherwise.

## Scope

This policy covers the `@thruputchain/client` npm package and the code in this
repository. Issues in the Thruput node, CLI, or protocol packages should be
reported to their own repositories under the
[thruputchain](https://github.com/thruputchain) organization.

## Supported versions

Only the latest published release receives security fixes. Please upgrade to
the newest version before reporting an issue.