BOUNDLY is currently in active development (Alpha). We recommend always using the latest version from the main branch.
| Version | Supported |
|---|---|
| v0.9.x-alpha | ✅ |
| v0.8.x-alpha | ✅ |
| v0.7.x-alpha | ✅ |
| < v0.7.0-alpha | ❌ |
BOUNDLY includes the following security features out of the box:
- Input Sanitization: Whitelist approach - only declared columns are accepted
- SQL Injection Prevention: Column whitelist validation in DynamicRepository
- Rate Limiting: Built-in
#[RateLimit]attribute with per-IP/user tracking - Authorization:
#[Authorize]attribute with role-based access control - Sensitive Data Protection:
#[Hidden],#[Encrypted],#[Hashed]attributes - Soft Delete: Logical deletion prevents permanent data loss
If you discover a security vulnerability within BOUNDLY, please do not open a public issue. Instead, use the GitHub Private Vulnerability Reporting feature in this repository.
- Go to the "Security" tab of the repository.
- Select "Reporting a vulnerability".
- Provide a detailed description and reproduction steps.
We will acknowledge your report within 48 hours and coordinate a fix.
Thank you for helping us keep BOUNDLY secure! ❤️