Thank you for helping keep Alien Invasion and its users safe. If you've found a security vulnerability, please report it responsibly.

Please use GitHub's built-in private vulnerability reporting:

1. Go to the repository's Security tab.
2. Click Report a vulnerability.
3. Fill out the form and submit.

This opens a private security advisory visible only to you and the maintainer — no public disclosure until it's fixed.

To help us triage quickly, please include:

• A description of the vulnerability and its potential impact.
• Steps to reproduce it (or a minimal proof of concept).
• The affected file(s) and version(s) if known.
• Any suggested mitigation, if you have one.

• You'll receive an acknowledgement within 7 days of your report.
• You may be contacted for more details while the issue is investigated.
• Once resolved, a fix will be released and a public security advisory will be published.

This channel is for security vulnerabilities only (e.g. code execution, unsafe deserialization, or malicious dependency issues).

• General bugs → open a Bug Report.
• Feature ideas → open a Feature Request.
• Questions or other discussion → please open an issue.

This project is pre-release and actively developed on main. Security fixes are applied to the main branch; there are currently no long-term supported release versions.