Skip to content

Security: zevic-lang/docs

Security

SECURITY.md

Security Policy

Supported versions

Zevic has not had a stable release yet. Only the latest commit on main is supported.

Reporting a vulnerability

Please do not report security issues in public issues or pull requests.

Use GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability. If that is unavailable, contact the maintainers at ja.yamatov.dev@gmail.com.

Include a description of the problem, how to reproduce it, and the affected version or commit.

What to expect

  • We aim to acknowledge reports within a few days.
  • We will keep you updated while we investigate and fix the issue.
  • We will credit you in the fix, unless you prefer to stay anonymous.

Scope

Examples of issues we care about: the compiler generating code that violates memory safety rules in the specification, zevpm get fetching or running something unexpected, and the runtime or standard library mishandling input.

There aren't any published security advisories