We take the security of Deepworks projects seriously. If you discover a security vulnerability, please report it privately — do not open a public issue.

Email [email protected] with:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof of concept
• The affected repository and version, if known

You can expect an acknowledgement within a few business days. We will work with you to understand and resolve the issue promptly, and we'll keep you informed of our progress.

Please give us a reasonable opportunity to investigate and release a fix before any public disclosure. We're happy to credit reporters who follow responsible disclosure.

Unless a repository states otherwise, security fixes are applied to the latest released version on the default branch.