At Crystal Studio Labs, we take code security, secret prevention, and dependency hygiene seriously.

We provide security updates and patch releases for the latest major version of our open-source tools:

If you discover a potential security vulnerability within any Crystal Studio Labs repository or action:

1. Do NOT open a public GitHub issue.
2. Send a private vulnerability report detailing:
   • Affected repository and file/version
   • Description of the vulnerability and potential impact
   • Proof-of-concept steps or exploit scenario
3. Email your report to: security@crystalstudiolabs.com or contact project leads privately on Discord.

We aim to acknowledge reports within 48 hours and provide resolution timelines within 7 business days.