urlx handles security-sensitive operations including TLS connections, credential management, cookie storage, and proxy authentication. We take security seriously.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please use GitHub Security Advisories to report vulnerabilities privately. Click "Report a vulnerability" and provide:

• A description of the vulnerability
• Steps to reproduce or a proof of concept
• The potential impact

We will acknowledge reports within 72 hours and aim to provide a fix or mitigation plan within 14 days.

For bugs that are not security-sensitive, please open a regular GitHub issue.

urlx is MIT-licensed. See LICENSE for details.