hal0 is pre-1.0 and ships from main. Security fixes land on the latest
release and the current main branch. Older tagged releases are not
back-patched.
| Version | Supported |
|---|---|
main (latest) |
✅ |
| tagged alphas | latest only |
Please do not open a public GitHub issue for security vulnerabilities.
Report privately via one of:
- GitHub's private vulnerability reporting (preferred — Security → Report a vulnerability)
- Email: alexander@awideweb.com
Please include:
- A description of the issue and its impact
- Steps to reproduce (proof-of-concept if available)
- Affected version / commit
- Any suggested remediation
- Acknowledgement within 5 business days.
- An initial assessment and severity triage shortly after.
- Coordinated disclosure: we'll agree on a timeline and credit you in the release notes unless you prefer to remain anonymous.
Thank you for helping keep hal0 and its users safe.