Security fixes are provided for the latest stable release and the current development branch.

If you believe you have found a security issue in VisionLite, please do not open a public issue.

Instead, report it privately through the repository owner’s private contact channel or the platform’s private vulnerability disclosure flow.

Please include:

• a clear description of the issue
• affected versions or branches
• steps to reproduce
• relevant logs, stack traces, or proof of concept code
• any recommended mitigation, if available

We will:

1. acknowledge the report
2. investigate the issue
3. coordinate a fix or mitigation
4. follow up with guidance for disclosure when appropriate

This policy applies to:

• the VisionLite library
• published artifacts
• sample app code when it affects the public release
• build and publishing configuration