# Security Policy
## Supported Versions
| Version | Supported |
| ------- | ------------------ |
| 4.x | :white_check_mark: |
| 3.x | :x: |
| < 3.0 | :x: |
## Reporting a Vulnerability
If you discover a security vulnerability, please report it by:
1. **Do NOT** open a public issue
2. Email the maintainer directly or use [GitHub's private vulnerability reporting](https://github.com/carcabot/tiktok-signature/security/advisories/new)
3. Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
You can expect:
- Acknowledgment within 48 hours
- Status update within 7 days
- Credit in the security advisory (unless you prefer anonymity)
## Security Best Practices
When using this package:
- Never expose your server publicly without authentication
- Use environment variables for sensitive configuration
- Keep the package updated to the latest version
- Run in a sandboxed environment when possible