Security

SECURITY.md

Security Policy

Supported Versions

This project is still in early development. Only the latest state of main is considered supported for security fixes.

Reporting A Vulnerability

Do not open a public issue for a suspected vulnerability.

Email contact@lan-nguyen-si.de with:

affected component or file
impact and attack scenario
reproduction steps if available
suggested mitigation if known

Response Expectations

The project aims to:

acknowledge a valid report promptly
reproduce and assess the issue
prepare a fix or mitigation
disclose publicly only after a fix or coordinated mitigation is available

Because this project is maintained on a best-effort basis, exact SLA commitments are not guaranteed.

There aren't any published security advisories