If you find a security vulnerability, please do NOT open a public issue.

Instead, email hello@varien.software. Include:

• Description of the vulnerability
• Steps to reproduce
• Possible impact assessment
• A suggested fix if you have one

You will receive a response within 48 hours.

This policy covers:

• generate.js and generation logic
• Hook files (security scanning, migration protection)
• The Bootstrap command and manifest processing
• Session tracker and monitor

This is a template repository. Users are responsible for the security of generated files. Templates follow best practices, but the security of the target project depends on the user's configuration.