# Security policy

## Supported versions

Security fixes are made on the latest version on the `main` branch. This project is pre-release software and does not promise fixes for older versions.

## Reporting a vulnerability

Use [GitHub private vulnerability reporting](https://github.com/haibala-aii/dsh-extensions-wallpaperskin/security/advisories/new) for issues that could expose local files, execute code, bypass DSH access controls, or reveal sensitive configuration.

Include the affected version, prerequisites, reproduction steps, impact, and any proposed mitigation. Do not include exploit details in a public issue before a fix is available.

For ordinary bugs without a security impact, use the public [issue tracker](https://github.com/haibala-aii/dsh-extensions-wallpaperskin/issues).