Security Policy

angular-movement is a client-side Angular animation library. Security reports are still welcome, especially for issues that could affect package integrity, supply chain safety, or unsafe DOM behavior.

Supported versions

Security fixes are handled for the latest published minor version.

Version	Supported
0.5.x	Yes
< 0.5	No

Reporting a vulnerability

Please do not open a public issue for a suspected vulnerability.

Use GitHub Security Advisories if enabled for the repository. If that is not available, contact the maintainer through the email or private contact method listed on the GitHub repository.

Include:

• A clear description of the issue.
• Steps to reproduce.
• A minimal example if possible.
• The affected version.
• Any known workaround.

Response expectations

The maintainer will try to acknowledge valid reports within 7 days and coordinate a fix or disclosure timeline depending on severity.