If you discover a security vulnerability or sensitive data issue, please report it responsibly:

1. Do NOT open a public issue
2. Use GitHub Security Advisories on the affected repository
3. Or contact the maintainers via security channels at um-bruch.org/impressum

• Acknowledgment: Within 7 days
• Initial assessment: Within 14 days
• Fix (if confirmed): Best effort, typically within 30 days

Only the latest release or default branch of each repository receives security updates.

This policy applies to all public repositories in the um-bruch organization.