# packageprobe — machine-readable security contact (RFC 9116)
# Canonical: https://packageprobe.dev/.well-known/security.txt
# Human-readable policy, scope, safe-harbour, and remediation targets:
#   https://packageprobe.dev/security
#
# Found something? Email security@packageprobe.dev. Please do not open a public
# issue. Ask at that address for our PGP key if you'd like to encrypt.

Contact: mailto:security@packageprobe.dev
Contact: https://packageprobe.dev/security
Expires: 2027-07-11T00:00:00.000Z
Policy: https://packageprobe.dev/security
Preferred-Languages: en
# Caddy serves the same static root for the apex and www hosts, so this file is
# reachable at both; RFC 9116 §2.5.2 wants a Canonical matching each retrieval URL.
Canonical: https://packageprobe.dev/.well-known/security.txt
Canonical: https://www.packageprobe.dev/.well-known/security.txt