Thank you for taking the time to review the security of maatify/rate-limiter.
We take security very seriously and appreciate any responsible disclosures that help improve the safety and reliability of the Maatify ecosystem.
Only the following versions currently receive security updates:
| Version | Status |
|---|---|
| 1.x | β Active Support |
| < 1.0 | β No longer supported |
If you are using an unsupported version, we strongly recommend upgrading to the latest stable release.
If you discover a security vulnerability, DO NOT open a public GitHub issue.
Instead, please contact the Maatify security team directly:
π§ security@maatify.dev
Provide as much detail as possible, including:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Affected versions
- Any proof-of-concept or references
- Optional: Suggested fix
You will receive an acknowledgment within 48 hours, and we will follow up as needed for clarification.
Once a vulnerability is reported:
- The Maatify team reviews and verifies the issue.
- A fix is prepared in a private branch.
- Maintainers coordinate with the reporter if more details are required.
- A security patch is released (e.g.,
1.x.xpatch version). - The vulnerability is documented in the changelog.
- Credit is given to the reporter (optional and with consent).
- Do not publish or share the vulnerability before a fix is released.
- Do not attempt to access user data, bypass rate limits in live systems, or escalate the issue beyond proof-of-concept.
- Never perform attacks on production systems.
We appreciate all researchers who follow these guidelines to ensure a safe and reliable ecosystem.
This policy applies specifically to:
maatify/rate-limiter- All supported drivers (Redis, MongoDB, MySQL)
- Rate-limit attempt/status/reset logic
- Exponential backoff and global limit mechanisms
- Middleware integration (PSR-15)
- Resolver and configuration layers
For vulnerabilities in other Maatify libraries, please refer to their respective security policies.
Your efforts help keep the Maatify ecosystem secure and reliable for everyone.
Built with β€οΈ by Maatify.dev β Unified Ecosystem for Modern PHP Libraries