PunamIDE is early alpha software. Security reports are taken seriously.

If you discover a security issue, please do not post it publicly in GitHub Issues, Discord, or social media.

Instead, report it privately first.

Use one of the following:

• Discord: https://discord.gg/PFp9KWY3eY
• Website: https://punamide.com

If a dedicated security email is added later, this document will be updated.

Please include:

• A clear description of the issue.
• Steps to reproduce.
• Affected version.
• Operating system.
• Potential impact.
• Screenshots or logs if safe to share.

Please do not publicly disclose:

• Remote code execution vulnerabilities.
• Token or secret leakage.
• Authentication or authorization bypasses.
• Installer tampering risks.
• Crash reports containing sensitive user data.
• Any exploit that could harm alpha users.

1. Report privately.
2. PunamIDE maintainers review and reproduce.
3. A fix is prepared.
4. A patched release is published.
5. Public disclosure may happen after users have a reasonable chance to update.

Thank you for helping keep PunamIDE users safe.