Report security vulnerabilities to security@komboe.com.

Please do not open a public GitHub issue for an undisclosed vulnerability. A public issue can put users at risk before a fix is available.

Include the affected version or commit, steps to reproduce, and the impact if you know it. You will receive an acknowledgement, and we will coordinate a fix and a disclosure timeline with you.

There are no numbered releases yet. The main branch is the supported line, and security fixes land there.

This policy covers the Encryptoglyph repository. Third-party images and libraries remain under their own security processes.