## Security

### Reporting a Bug

If you find a security related issue, please contact us at kew-player AT proton DOT me.

When a fix is published, you will receive credit under your real name or bug
tracker handle in Codeberg. If you prefer to remain anonymous or pseudonymous,
you should mention this in your e-mail.

### Disclosure Policy

The maintainer will coordinate the fix and release process, involving the
following steps:

  * Confirm the problem and determine the affected versions.
  * Audit code to find any potential similar problems.
  * Prepare fix for the latest release. This fix will be
    released as fast as possible.

You may be asked to provide further information in pursuit of a fix.
