# Security Policy

## Supported Versions

Security fixes are prioritized for the latest released version of `vietnam-address-kit`.

## Reporting a Vulnerability

Please do not disclose security vulnerabilities publicly before maintainers have had time to assess them.

Report vulnerabilities by opening a private GitHub security advisory when available, or by contacting the maintainers through the repository owner profile.

Include:

- Affected version.
- Reproduction steps.
- Impact assessment.
- Suggested fix, if known.

## Scope

Security issues may include dependency vulnerabilities, CLI file handling bugs, package publishing problems, or unsafe parsing behavior.

Data correctness issues should be reported as normal issues unless they create a direct security risk.