We release patches for security vulnerabilities in the following versions:
| Version | Supported |
|---|---|
| 1.x.x | ✅ |
Please report (suspected) security vulnerabilities to security@panoramicdata.com. You will receive a response from us within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity.
Please do not report security vulnerabilities through public GitHub issues.
When using this library:
- API Tokens: Never commit API tokens to source control
- User Secrets: Use User Secrets or environment variables for sensitive configuration
- HTTPS: Always use HTTPS endpoints (default behavior)
- Token Storage: Store tokens securely using appropriate secret management solutions
- Rotate API tokens regularly
- Use read-only tokens when write access is not needed
- Implement proper error handling to avoid leaking sensitive information
- Keep the library updated to the latest version