SwitchStone takes the security of its software and users seriously.

Security fixes are prioritized for the latest release and the current main branch of active repositories.

Do not open public GitHub issues for security vulnerabilities or sensitive exploits.

To report a vulnerability:

1. Navigate to the Security tab of the specific repository affected.
2. Click Report a vulnerability to open a draft GitHub Security Advisory.
3. Provide a clear description of the vulnerability, reproduction steps, proof-of-concept code, and the potential impact.

If private vulnerability reporting is unavailable on a repository, submit details via the organization profile at github.com/switchstonedev.

SwitchStone operates under a solo maintainer model. Reports are reviewed on a best-effort basis without formal enterprise service-level agreements (SLAs). Verified vulnerabilities will receive an acknowledgment followed by a patch and security advisory once resolved.