Please do not report security vulnerabilities in public issues. Use GitHub's private vulnerability reporting for this repository when available. Include the affected component, reproduction steps, impact, and any suggested mitigation.

If private vulnerability reporting is unavailable, contact the repository maintainers privately before disclosing the issue publicly.

This policy covers the BumpAlert application, its source code, and the services maintained in this repository. Never include API keys, credentials, personal information, or live user data in a report.