Skip to content

Security: fabegalo/xone-native

Security

SECURITY.md

Security policy

xone-native is experimental and currently at M0; there are no production-compatible dashboard/game releases. Security fixes target the current main branch. No patch-support promise is made for older snapshots.

Do not publish exploit details, credentials, keys, account data, proprietary dumps or protected console files in a public issue or pull request. When GitHub private vulnerability reporting is enabled, use Security → Report a vulnerability. Its current availability has not been verified. If it is unavailable, open a public issue with only a request to enable private vulnerability reporting, without describing the vulnerability, and share details once a private channel is available.

Include affected revision, impact, reproduction steps and synthetic sample files when possible. Ordinary non-security crashes and M0 inspection bugs can be reported as regular issues with sanitized metadata and logs.

There aren't any published security advisories