gamertan
3a4b6db9b8
verify / verify (push) Successful in 2m55s
Export the reviewed application-neutral package set through the exact public allowlist. Development history and private application evidence remain outside this canonical source root. Developed with material AI assistance under maintainer review. Signed-off-by: Cole Speelman <crspeelman@gmail.com>
772 B
772 B
Security policy
Report suspected vulnerabilities privately to security@sandwichhime.com.
Include the affected package/version, a minimal reproduction, impact, and any
suggested mitigation. Please do not place secrets, personal request logs, live
databases, or exploit details in a public issue.
The maintainer aims to acknowledge reports within three business days, provide an initial triage within seven, and keep reporters updated at least every fourteen days while work remains open. These are best-effort targets, not a service-level agreement. There is no bug bounty.
The preview supports only versions explicitly listed in release notes. Security claims stop at the documented trust boundaries and executable tests.