This is the default policy for repositories under excelano that do not carry one of their own. A repository with its own SECURITY.md supersedes this file completely — read that one instead, since it will describe what that particular project can access and where it stores anything.

Please report suspected vulnerabilities privately, using the Report a vulnerability button on the Security tab of the repository concerned. If that button is not there, or you would rather not go through GitHub, email david.anderson@excelano.com instead. I aim to respond within seven days.

Please do not open public issues for security problems.

The latest release receives security fixes. Older releases are not supported. A repository with no releases is supported at its default branch.

Projects that authenticate, reach an external system, or accept input from a network carry their own policy naming what that specific project can access and what it stores. This file covers everything else, and the reporting channel above applies to every repository here either way.