Security policy

This policy covers every golusoris repository that ships no SECURITY.md of its own.

Reporting a vulnerability

Please do not open public GitHub issues for security vulnerabilities.

Email: security@lusoris.dev, or open a private security advisory on the affected repository.

We aim to acknowledge within 72 hours and provide a remediation plan within 7 days.

Each repository's own SECURITY.md lists its supported versions. Without one, only the latest release is patched.