I take security seriously and want to ensure that the projects I've guided are safe.
If you discover a security vulnerability, please report it to me directly before making it more public through a GitHub Issue since it might affect people that are using these projects live.
Warning
Do not disclose a vulnerability publicly until I have had a chance to address it.
Since I'm a sole developer and I do maintenance of these projects on my free time, I might not be able to address the vulnerability immediately. I appreciate your understanding and patience in this matter. If something requires immediate attention and you think you or your company is affected but might help remediate it, please do not hesitate to reach out to me directly. I will do my best to address the issue as soon as possible.
For security communications, feel free to e-mail me at:
hey (at) patrickdap (dot) com
You can also find me on social media. Use my GitHub Profile to find my other social media accounts. I will do my best to respond to you as soon as possible!
If you find a non-critical security issue, please open an issue on GitHub and tag me. I will do my best to address it as soon as possible. If you think the issue is critical, consider using the guidance above.