smppjs/SECURITY.md

Modern approach to smpp protocol.

# Security Policy

## Supported Versions

The following versions of `smppjs` are currently supported with security updates:

| Version | Supported          |
| ------- | ------------------ |
| 1.2.0     | ✅                |
| 1.1.0     | ❌                |
| 1.0.0     | ❌                |

## Reporting a Vulnerability

If you find a security vulnerability in `smppjs`, please report it responsibly.

You can:

- 🛡️ Use [GitHub's private vulnerability reporting](https://github.com/joaogervasoni/smppjs/security/advisories/new) for confidential submissions
- 📝 Open a public [issue](https://github.com/joaogervasoni/smppjs/issues) and label it appropriately (e.g., `security`), if the information is not sensitive

We will review all reports as soon as possible and take appropriate action.

## Recommendations

While using `smppjs`, please:

- Sanitize and validate any user inputs
- Keep dependencies up-to-date
- Avoid exposing SMPP connections to public networks
- Not using Buffer unsafe to avoid uninitialized memory

Thanks for contributing to a safer ecosystem!