Welcome to the official security policy for the CLUSTER repository maintained by the CLUSTER Data Science Club. We are committed to keeping our open-source projects safe for contributors, collaborators, and users.
We primarily support the latest version of CLUSTER projects. If you are using an older version, we recommend upgrading to ensure security and compatibility.
| Version | Supported |
|---|---|
| Latest (main) | ✅ |
| Older commits | ❌ |
If you discover a vulnerability in this repository, we encourage you to report it privately and responsibly.
- Do NOT open a public issue for security flaws.
- Privately report the vulnerability by emailing the maintainer.
- Include the following in your report:
- A detailed description of the issue.
- Reproduction steps.
- Any known exploits or risks.
- Optional: Recommendations for a fix.
⌛ We will acknowledge your report within 5 working days and aim to resolve all verified security issues promptly.
To help maintain a secure development environment:
- Never include sensitive information (API keys, passwords) in commits.
- Always validate and sanitize external inputs in data pipelines or apps.
- Keep dependencies up to date and review package vulnerabilities.
- Avoid using untrusted code or models in your projects.
We value contributions that improve the security of our work. Responsible disclosure reports will be:
- Acknowledged promptly.
- Credited in the changelog (with permission).
- Resolved in collaboration with you, if desired.
🙏 Thanks for helping make CLUSTER a secure and collaborative space for learning and development!