Use this section to tell people about which versions of your project are currently being supported with security updates.

If you discover a security vulnerability within PepperEvolution, please send an email to mfb@torontomu.ca. All security vulnerabilities will be promptly addressed.

1. Description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)

• Initial response: Within 48 hours
• Status update: Within 1 week
• Resolution: As soon as possible, typically within 2-4 weeks

When using PepperEvolution:

1. Never commit API keys to version control
2. Use environment variables for sensitive configuration
3. Keep your Pepper robot in a secure network environment
4. Regularly update dependencies
5. Monitor logs for suspicious activity
6. Use HTTPS for all external communications
7. Implement proper authentication if deploying to production

We appreciate security researchers who responsibly disclose vulnerabilities. We will:

• Acknowledge your report
• Work with you to understand and validate the issue
• Keep you updated on our progress
• Credit you in our security advisories (if you wish)

Thank you for helping keep PepperEvolution secure! 🤖🔒