If you discover a security vulnerability, please report it responsibly:
- Do not open a public issue
- Email security@prosperus.dev with:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- You will receive a response within 48 hours
| Version | Supported |
|---|---|
| 0.1.x | Yes |
- All API endpoints under
/v1/require Bearer token authentication - Request bodies are validated with Zod schemas before processing
- Database queries use parameterized queries via Drizzle ORM (no raw string interpolation)
.gitignoreexcludes.envfiles, secrets, and credentials- Dependencies are monitored via Dependabot