Security updates and fixes are currently supported for the active development version of the Deakin Detonator Toolkit (DDT) repository.

If you discover a security vulnerability, issue, or unsafe behaviour within the project, please report it responsibly.

Team members and contributors are encouraged to report vulnerabilities directly to the project team leaders or mentors through the approved project communication channels.

External contributors or users may report vulnerabilities by opening a private security advisory or contacting the project maintainers where appropriate.

Please avoid publicly disclosing vulnerabilities until they have been reviewed by the team.

When reporting an issue, try to include:

• Description of the vulnerability
• Steps to reproduce the issue
• Affected files, tools, or features
• Possible impact
• Suggested fix (if available)

The project may use GitHub security tools such as CodeQL and Dependabot to identify potential vulnerabilities, dependency issues, and insecure code patterns.

Contributors and students interested in reviewing or fixing repository security alerts can refer to the GitHub Security Measures documentation available in the Hardhat shared documentation folder.

Please follow responsible disclosure practices and only test vulnerabilities in approved or authorised environments.