Security fixes are developed on main. Releases before 1.0 do not have a separate long-term maintenance branch.

Report suspected vulnerabilities to halhadusmail@halhadus.rocks. Include the affected revision, reproduction, impact and relevant logs. Keep exploit details out of public issues until the fix and disclosure are coordinated.

Ordinary crashes and functional failures can use the bug report form unless they expose a security issue.