Eigenon is currently pre-1.0. Security fixes are applied to the latest commit on master; older commits and unreleased development snapshots are not maintained as separate supported release lines.

Do not open a public issue for a suspected vulnerability.

Use GitHub's private vulnerability reporting form. Include the affected revision, impact, reproduction steps or proof of concept, and any suggested mitigation. Remove credentials, private keys, and unrelated personal data from the report.

The maintainer will acknowledge a report as soon as practical, investigate it privately, and coordinate disclosure after a fix or mitigation is available. Please do not disclose the issue publicly before that coordination is complete.

Reports about dependency vulnerabilities, unsafe parsing or execution, repository automation, release integrity, and accidental credential exposure are in scope. General bugs and feature requests should use the public issue templates instead.