If you discover a security vulnerability in Whisky, please report it responsibly. Do not open a public GitHub issue.

Instead, please contact one of the maintainers directly:

• Hinson Wong (@HinsonSIDAN)
• Tsz Wai (@twwu123)
• Ken Lau (@kenlau666)
• Anson Chui (@AnsonSIDAN)

You can also reach us via our Discord server.

When reporting a vulnerability, please include:

• A description of the vulnerability
• Steps to reproduce the issue
• The potential impact
• Any suggested fixes (if applicable)

• We will acknowledge receipt of your report within 48 hours.
• We will provide an initial assessment within 7 days.
• We will work with you to understand and resolve the issue, and coordinate disclosure.

We follow a coordinated disclosure process. Please allow us reasonable time to address the vulnerability before making any public disclosure.