Please use GitHub's private vulnerability reporting rather than opening a public issue. Include a description of the issue and, if you have one, a minimal reproduction.
We aim to acknowledge reports within 5 business days. There is no bug bounty; this is a volunteer-maintained package from a 501(c)(3).
In scope: kdf.ts, crypto.ts, key-store.ts, stores.ts, envelope-access.ts,
break-glass.ts, blob-store.ts, and the five published adapters — adapters/d1,
adapters/r2, adapters/memory, adapters/pages-http, adapters/conformance.
Out of scope: vulnerabilities in an adopter's own use of this package that fall outside the
guarantees documented in THREAT_MODEL.md (for example, an adopter exposing a Store method to
an unauthenticated caller). Read THREAT_MODEL.md first — several things that look like bugs
(extractable keys, no forward secrecy on revoke) are documented, deliberate tradeoffs, not
unknown issues.
Only the latest published minor version receives security fixes, per CHANGELOG.md. This
package is pre-1.0; expect breaking changes between minor versions until 1.0.0.