PantryOps is currently in early-stage development (0.x). Security fixes are applied on the default branch.

Please do not open public issues for security vulnerabilities.

Use one of these channels:

• GitHub Security Advisories (preferred)
• Private email to the maintainer: security@pantryops.local

Include:

• Affected component and version/commit
• Reproduction steps or proof of concept
• Impact assessment
• Suggested remediation (if available)

• Initial acknowledgement: within 72 hours
• Triage decision: within 7 days
• Fix timeline: based on severity and exploitability

Please allow time for a fix before public disclosure. Once patched, we will publish a changelog entry and credit reporters unless anonymity is requested.