Please report security vulnerabilities to sdi2200243@di.uoa.gr.
Do not file public GitHub issues for security-sensitive reports.
This policy covers the public repositories under the existing
verifiablelabs organization. Current
Enthym prose retains Verifiable Labs repository and package identifiers.
The existing hosted-service scope includes api.verifiable-labs.com and
verifiable-labs.com. Naming those endpoints does not establish current
availability or runtime enforcement.
- Findings against third-party dependencies — please report upstream
- Social-engineering reports against the maintainer
- DoS / rate-limit findings on the unauthenticated public API