We are committed to maintaining the security of the Ref Cards App. The following versions are currently supported with security updates:

We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly.

Please do NOT create a public GitHub issue for security vulnerabilities.

Instead, please report security vulnerabilities by:

1. Email: Send details to the repository maintainers
2. GitHub Security Advisories: Use the Security tab to privately report vulnerabilities

When reporting a vulnerability, please include:

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact
• Suggested fix (if any)
• Your contact information

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 5 business days
• Status Updates: Every 7 days until resolution
• Fix Timeline: Depends on severity
  • Critical: 1-7 days
  • High: 7-30 days
  • Medium: 30-90 days
  • Low: Best effort basis

1. We'll acknowledge your report and begin investigation
2. We'll work on a fix and keep you updated on progress
3. We'll notify you when the fix is ready for testing
4. After verification, we'll release the fix
5. We'll publicly disclose the vulnerability (with credit to you, if desired)

• Download APKs only from official GitHub releases
• Verify APK signatures before installation
• Keep your app updated to the latest version
• Report suspicious behavior immediately

• Never commit sensitive data (API keys, passwords, keystores)
• Use environment variables for sensitive configuration
• Follow secure coding practices
• Keep dependencies up to date
• Review code for security issues before merging

This app requires minimal permissions:

• No internet access required
• No special permissions needed
• No data collection or transmission

• No user data is collected
• No analytics or tracking
• No network communication
• All functionality is local to the device

We use Dependabot to automatically check for vulnerable dependencies. Security updates are prioritized and applied promptly.

Security updates will be:

• Released as soon as fixes are verified
• Announced in release notes
• Tagged with appropriate severity levels
• Documented in CHANGELOG.md

We appreciate responsible disclosure of security vulnerabilities. Contributors who report valid security issues will be acknowledged in our security advisories (with their permission).

For security-related questions or concerns, please contact the repository maintainers through GitHub.

Thank you for helping keep Ref Cards App and its users safe!