If you discover a security vulnerability in this library, please report it responsibly.
Do NOT open a public GitHub issue for security vulnerabilities.
Instead, email security concerns to: support@kwtsms.com
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
We will acknowledge receipt within 48 hours and provide an update within 7 days.
| Version | Supported |
|---|---|
| 0.4.x | Yes |
| 0.3.x | Yes |
| 0.2.x | No |
| 0.1.x | No |
When using this library:
- Never hardcode credentials in source code
- Use environment variables or
.envfiles for API credentials - Add
.envto.gitignoreto prevent credential leaks - Mask credentials in logs: the library does this automatically
- Use HTTPS only: the library enforces this
- Implement rate limiting in your application before going live
- Use CAPTCHA/bot protection on forms that trigger SMS sends