If you discover a security vulnerability in sit, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email [xuxinglong00423@163.com] with:

1. A description of the vulnerability
2. Steps to reproduce the issue
3. The potential impact
4. Any suggested fix (if you have one)

You should receive a response within 7 days. We will work with you to understand the issue and coordinate a fix and disclosure timeline.

This policy covers the sit CLI tool and its direct dependencies. Issues in third-party libraries should be reported to their respective maintainers.