Please do not report vulnerabilities in a public issue.

Email security@namoid.in with a description, reproduction steps, affected versions, and impact. Do not include production credentials, access tokens, one-time codes, private keys, or customer data. We will acknowledge the report and coordinate remediation and disclosure privately.

This repository contains a thin client integration. Reports about the hosted NamoID service are welcome through the same private channel.