otpauth/SECURITY.md

Security policy

Reporting a vulnerability

If you have found or just suspect a security vulnerability, it would be greatly appreciated disclosing it in a responsible manner at hector@molinero.dev.