Maintainer: Shawn Londono / LedoCorp
Project: fx

Please do not open a public GitHub Issue for security-sensitive reports.

Until a dedicated form exists on http://www.ledocorp.org, report vulnerabilities privately by contacting LedoCorp through channels listed on that site (when published), or by using a private maintainer contact if one has been provided to you.

Include:

• Affected component / version (see VERSION or fx version)
• Impact summary
• Reproduction steps or proof-of-concept (if safe to share)
• Whether a fix is already known

The maintainer will acknowledge reports as capacity allows and may coordinate a fix before any public discussion. There is no guaranteed response SLA.

This policy covers the published fx language package: compiler binaries, scaffolds, standard library, examples, documentation, and zspec headers / libraries shipped in this repository.