Security Policy

I appreciate the opportunity to investigate and develop fixes before public disclosure.

I will not publish details in a public issue or PR until a fix is available.

This project follows a 90 day disclosure timeline.

Reporting a Vulnerability

Security is very important to this project. If you have any issue regarding security, please disclose the information responsibly by following these steps:

• Please, Do NOT create a public issue or pull request
• Please email security@voidwarex.com with the Required Information
• Alternatively, use GitHub’s private vulnerability reporting feature

Required Information

To help me assess the issue, please provide:

• A summary of the problem
• Affected versions
• If possible, steps to reproduce the vulnerability (proof-of-concept code is ideal)
• If known, mitigations for the issue

Response Time

As a single-maintainer project, I will acknowledge receipt within [e.g., 7 days] and work to address the issue as soon as possible.