Unpublish Policy

Note: This is a boilerplate document. It must be reviewed by legal counsel.

To ensure the stability of the ecosystem and prevent broken dependencies for other users, we strictly limit unpublishing rulesets from the SigmaShake Hub after they have gained public traction.

1. Grace Period: You may freely unpublish any package version within the first 7 days of publication.
2. Permanent Removal: After 7 days, unpublishing a version is generally only permitted for security incidents, accidental secrets disclosure, or legal reasons.
3. Deprecation: If a ruleset is no longer maintained, we strongly advise using the "deprecate" flag rather than unpublishing.