Security fixes are considered for the latest version on the default branch. Older snapshots, prototypes and archived development lines may not receive updates; check the README for the repository's current status.

Please do not disclose a suspected vulnerability in a public issue.

Use this repository's Security tab and Report a vulnerability option where available. Include the affected version or commit, impact, reproduction steps and any suggested mitigation. Do not include API keys, passwords, customer data or other secrets.

If private vulnerability reporting is unavailable, contact Opace Digital Agency and identify the affected GitHub repository.

Reports are reviewed on a best-effort basis. This policy does not create a support SLA.