Security updates are applied to the active default branch and current production deployment path.
| Version | Supported |
|---|---|
main |
Yes |
| Older branches/tags | No |
Do not open public issues for security vulnerabilities.
Report privately via:
- GitHub Security Advisories:
Securitytab in this repository - Email:
security@heyclau.de
Include:
- Affected URL/path and category (site, API route, CI, content parser, etc.)
- Reproduction steps and expected impact
- Proof-of-concept details (minimal, safe)
- Suggested remediation if known
- This repository is open source and includes community-submitted content metadata.
- Downloadable third-party packages are not automatically trusted.
- Maintainer-verified package hashes are provided for integrity checking when available.