We release patches for security vulnerabilities. The following versions are currently supported:

If you discover a security vulnerability in AmpecoUI, please report it by emailing our security team or by creating a private security advisory on GitHub.

Please do not report security vulnerabilities through public GitHub issues.

When reporting a vulnerability, please include:

• A description of the vulnerability
• Steps to reproduce the issue
• Possible impact of the vulnerability
• Any suggested fixes (if you have them)

• We will acknowledge receipt of your vulnerability report within 48 hours
• We will provide a more detailed response within 7 days
• We will work to release a fix as quickly as possible, depending on the complexity

When using AmpecoUI in your applications:

1. Keep dependencies updated: Regularly update to the latest version of AmpecoUI and its dependencies
2. Review peer dependencies: Ensure React, React DOM, and React Router are up to date
3. Sanitize user input: Always sanitize user-provided content before rendering
4. Follow React security guidelines: Apply React's security best practices in your application

When we receive a security bug report, we will:

1. Confirm the problem and determine affected versions
2. Audit code to find any similar problems
3. Prepare fixes for all supported releases
4. Release new versions as soon as possible

Thank you for helping keep AmpecoUI and its users safe!