# Security Policy

## Supported versions

Security updates are provided for the latest published version of `pi-profiles`.

## Reporting a vulnerability

Please do not open a public issue for security vulnerabilities.

Report vulnerabilities by email to Ivan Sanchez at ivan31.sanchez@gmail.com. Include:

- A clear description of the issue.
- Steps to reproduce it.
- Affected versions or commits, if known.
- Any suggested mitigation, if available.

I will acknowledge the report as soon as possible and coordinate a fix before public disclosure.

## Security model

Pi extensions run with the user's local system permissions. Review installed extensions before enabling them, and only install packages from sources you trust.