Skip to content

Repository navigation

Security: Rika-Labs/orika

Security

SECURITY.md

Security Policy

ORIKA is a security-sensitive desktop framework. Please report vulnerabilities privately before opening a public issue.

Supported Versions

The project is pre-v1.0.0. Security fixes target the current default branch until versioned releases begin.

Reporting a Vulnerability

Email security reports to dallenpyrah@rikalabs.sh.

Include:

  • affected package, crate, command, or host behavior;
  • reproduction steps or a minimal proof of concept;
  • expected impact;
  • any logs, traces, or screenshots that help validate the report.

Rika Labs will acknowledge reports within 3 business days and will coordinate fix disclosure after a patch or mitigation is available.

Public Discussion

Do not open a public issue for an unpatched vulnerability. Use public issues for hardening requests, documentation gaps, and already-disclosed problems.

There aren't any published security advisories