This file applies as the default security policy for any repository under the
psychedelicsinrecovery organization that doesn't have its own SECURITY.md.
If you find a security issue in a PIR®-maintained repository — or in the public-facing psychedelicsinrecovery.org site — please report it privately rather than opening a public issue.
Email: info@psychedelicsinrecovery.org
Please include:
- A description of the issue and where you found it
- Steps to reproduce, if applicable
- Any potential impact you're aware of
We'll acknowledge reports as promptly as we can. PIR® is an all-volunteer nonprofit organization — response times may vary, but every report is read and taken seriously.
This applies to code and infrastructure under PIR®'s direct control (this GitHub organization, the main website). It does not cover third-party plugins or services PIR® uses but doesn't maintain — please report those directly to their own maintainers.