Waniwani Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: https://github.com/WaniWani-AI/sdk/blob/main/SECURITY.md
policy:
  - https://github.com/WaniWani-AI/sdk/blob/main/SECURITY.md
  - https://github.com/WaniWani-AI/sdk/security/advisories/new
contact: [security@waniwani.ai]
coordinated_disclosure: true
acknowledgement_sla: "3 business days"
triage_sla: "7 business days"
scope:
  in: ["@waniwani/sdk npm package (OSS flow engine + hosted-tier client code)"]
  out: ["third-party dependencies", "issues requiring compromised host / physical access", "app.waniwani.ai infra unrelated to the SDK"]
evidence:
  - {source: "https://github.com/WaniWani-AI/sdk/blob/main/SECURITY.md", kind: security-policy}
  - {source: "https://github.com/WaniWani-AI/sdk/security/advisories/new", kind: github-security-advisories}