# RFC 9116 - https://datatracker.ietf.org/doc/rfc9116/
Contact: mailto:security@colorui.io
Expires: 2027-03-28T00:00:00.000Z
Preferred-Languages: en
Canonical: https://colorui.io/.well-known/security.txt
Policy: https://colorui.io/security
Acknowledgments: https://colorui.io/security#thanks

# Scope
# In scope:    *.colorui.io, every package we publish (@colorui/*, colorui),
#              every extension we ship (Chrome / Figma / VSCode / Raycast),
#              the GitHub Action colorui/contrast-action, the MCP server.
# Out of scope: third-party services we link to but do not control.

# Hall of Fame: https://colorui.io/security#thanks