Polymarket UI Kit is read-first in v0 and does not submit authenticated orders.

Pre-1.0 releases receive best-effort fixes.

Open a private security advisory on GitHub or contact the maintainer through the profile at https://github.com/horn111.

Please include:

• affected package and version
• reproduction steps
• impact
• suggested fix, if known

In scope:

• dependency supply-chain issues
• unsafe rendering behavior
• leaked secrets in examples or docs
• incorrect guidance around authenticated trading

Out of scope:

• Polymarket API availability
• market data correctness controlled by upstream APIs
• trading losses caused by downstream applications