Do not report security issues in public issues, discussions or pull requests.

Report them privately, through either channel:

• GitHub Private Vulnerability Reporting (preferred)
• E-mail to security@data-worx.de

Please include what is affected, how to reproduce it, and the impact you expect. A proof of concept helps, but is not required.

• You receive a first response within 7 days.
• The issue is confirmed or rejected, and you are kept informed while a fix is prepared.
• Once a fix is released, the issue is disclosed in a GitHub Security Advisory. You are credited unless you ask not to be.

Only the latest minor release receives security fixes. Older releases are not patched; upgrade to the latest minor release to get a fix.

Homeport is pre-alpha and has no release yet.