The answerr team takes the security of our platform, API endpoints, and users seriously.

Only the latest commit on the main branch and current production release of answerr and api.answerr.me are actively supported with security updates.

If you discover a security vulnerability within answerr or related services, please follow responsible disclosure guidelines:

1. Do not create a public GitHub issue. Public issues disclose vulnerabilities before a fix can be prepared.
2. Please report security issues privately via GitHub Security Advisories or by emailing the project maintainer at security@answerr.me (or contacting via GitHub profile).
3. Provide detailed steps to reproduce the issue, including request payloads, HTTP logs, and environment details.

• We will acknowledge receipt of your vulnerability report within 48 hours.
• We will provide a timeline for assessing and remediating the issue.
• Once fixed, a security advisory and attribution will be published with your consent.

Thank you for helping keep the answerr ecosystem secure!