hybrid-id-generator/SECURITY.md

A powerful hybrid ID generator that combines timestamps, machine IDs, random bits, and sequence numbers to create globally unique identifiers. Features collision prevention, Base62 encoding, and optional ID expiry tracking, ideal for distributed systems a

# Security Policy

## Supported Versions

The following versions of the `hybrid-id-generator` are currently supported with security updates. If you are using an older version, please update to the latest supported version to ensure security fixes are applied.

| Version | Supported          |
| ------- | ------------------ |
| 3.x.x   | :white_check_mark: |
| 2.x.x   | :white_check_mark: |

## Reporting a Vulnerability

If you discover a security vulnerability in the `hybrid-id-generator` package, please report it as soon as possible to ensure the safety of all users.

To report a vulnerability:
1. Send an email to **[miladezzat.f@gmail.com](mailto:miladezzat.f@gmail.com)** with details of the vulnerability.
2. Please include as much information as possible, including steps to reproduce the issue, your environment (e.g., Node.js version), and any potential fixes you have in mind.
3. You will receive an initial response within **48 hours** confirming receipt of the vulnerability report.

### What to Expect
- Once a vulnerability is reported, we will work to verify it within **5 business days**.
- If the vulnerability is confirmed, we will work on a fix and release a patched version. You will be kept informed throughout the process and notified when the fix is released.
- If the vulnerability is declined, you will have an explanation.

We take security seriously and will strive to resolve any valid security issues as quickly as possible to ensure the safety of our users and their projects.