Security Policy

Supported Versions

Version

Supported

1.0.x

Yes

0.9.x

No

0.8.x

No

Reporting a Vulnerability

It is thought to be highly unlikely that there will be any security vulnerabilities will emerge in the near future, since the nature of this project means it should not see much applications in security-sensitive fields, but this is still included for compliance with OpenSSF Best Practices standards. Please report as follows:

  • GitHub-native method

    Navigate to the security tab, then click on “Report a vulnerability” in the upper right corner. Comprehensive guidelines should be shown.

  • Via email

    Send me an email.

    If possible, encrypt your message with PGP. The fingerprint is 836B3C7AA3DAC6337F61CD2D2A5943B64B0994DE, and the public key is shown below.

    Always check the key against the fingerprint first in case the former was compromised.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=MQQl
-----END PGP PUBLIC KEY BLOCK-----

Thank you for your report in this unfortunate scenario. If you wish not to be acknowledged, please specify so in the email.

Please note that reporting such potential exploits, if they are to emerge, via public channels such as the issues tab, is a sure-fire way to notify the attackers (if any), who may then adjust their strategy. Therefore, you should ensure the communication method chosen is secure according to the directions above.