We take the security of Huawei Cloud DevKit seriously. If you believe you have found a security vulnerability, please report it to us as described below.

Please do not report security vulnerabilities through public GitHub issues.

Instead, please report them privately to the maintainers by email:

• Email: huaweiclouddev@huawei.com

Please include the following information in your report:

• A description of the vulnerability
• The affected version(s) and environment
• Steps to reproduce, or a minimal proof of concept
• Any other relevant details

• We will acknowledge receipt of your report.
• We will investigate and, if the report is valid, work on a fix.
• We will keep you informed of progress where possible.

This policy applies to the huaweicloud-devkit repository and its released npm packages.

We recommend always using the latest release.