| Version | Supported |
|---|---|
| 4.x | ✅ Current |
| 3.x | ❌ Deprecated |
If you discover a security vulnerability, please:
- Do NOT open a public issue
- Email: vikassahani17@gmail.com
- Include detailed description and steps to reproduce
- Allow time for us to investigate and patch
We take security seriously and will respond promptly.
- API keys stored in environment variables (never in code)
- Google's native content filtering enabled
- No PII stored in sessions
- HTTPS enforced in production (Cloud Run)
- Regular dependency updates