| Version | Supported |
|---|---|
| 0.1.x | ✅ |
If you discover a security vulnerability in this package, please report it responsibly:
- Do not open a public GitHub issue
- Email the maintainers or use GitHub's private vulnerability reporting
- Include a description of the vulnerability and steps to reproduce
We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.
- This package uses
DefaultAzureCredentialby default, which follows the Azure SDK credential chain. Ensure your environment is configured securely. - Connection strings should never be committed to version control. Use environment variables or Azure Key Vault.
- The
prefixconfiguration option provides namespace isolation but is not a security boundary. Use separate containers or storage accounts for true tenant isolation.