Living Code ports are mostly static theme files, but many repositories also ship build scripts, installers, editor plugins, packages and GitHub workflows. A vulnerability in any of them is in scope.

Please report it privately. Do not open a public issue.

• GitHub: use Report a vulnerability in the affected repository's Security tab.
• Email: help@living-code.dev.

Include the repository, the affected file or release, and the steps to reproduce. Fixes are released from each repository's main branch; there are no long-term support branches.