apowerb

Security Policy

Supported Versions

We release security patches for the versions listed in the table below.

Version	Supported
0.1.x	:white_check_mark:
< 0.1	:x:

apowerb is pre-1.0: the current release line is 0.1.x, and that is what receives security patches. Move this table to 1.x when a 1.0 ships.

Reporting a Vulnerability

We take the security of apowerb seriously. If you believe you have found a security vulnerability, please do NOT open a public issue or pull request on GitHub.

How to Report

Please report security issues through one of the following methods:

Submit a private report via GitHub Security Advisories.

This keeps the report private until a fix ships, notifies the maintainers, and lets us credit you in the published advisory. It is the only channel we monitor — no personal mailbox is listed here on purpose, so a report never depends on one person reading their mail.

What to Include in Your Report

To help us assess and resolve the issue quickly, please include:

• A description of the vulnerability and its potential impact.
• Step-by-step instructions or a minimal reproducible example (Proof of Concept).
• Your Python environment details (Python version, OS, apowerb package version).

What to Expect

• Acknowledgment: We will acknowledge receipt of your report within 48 hours.
• Assessment: We will evaluate the report and confirm the vulnerability or request more information.
• Fix & Advisory: Once confirmed, we will work on a fix, issue a patched version, and publish a Security Advisory with credit to you (unless you prefer to remain anonymous).

Thank you for helping keep apowerb safe for everyone!

This site is open source. Improve this page.