Please report security issues privately. Do not open a public issue for a vulnerability.

• Preferred: GitHub private vulnerability reporting. Use the Security tab on this repository and choose Report a vulnerability.
• Or contact Ghost Developer Studio through the contact details on the studio profile: https://github.com/littlestjames82-sys

We aim to acknowledge a report within a few business days and will agree a disclosure timeline with you.

This policy covers the code in this repository (decksmith). Reports about third party services, dependencies used outside this project, or hypothetical issues without a working demonstration are out of scope.

Only the latest release or the current main branch receives security fixes. Older snapshots are not patched.