AstronomyKit follows semantic versioning. Security fixes are applied to the latest minor release line. Older release lines are not maintained.
If you believe you have found a security issue in AstronomyKit, please do not open a public GitHub issue. Instead, email astronomykit@heirloomlogic.com with:
- A description of the issue and its impact
- Steps to reproduce
- Any suggested remediation
You can expect an acknowledgement within a few business days. Once the issue is confirmed, we will coordinate a fix and a disclosure timeline with you.
AstronomyKit is an on-device computation library. It performs no network I/O, reads no files, and does not process untrusted input beyond numeric arguments. Plausible issues include:
- Memory-safety bugs in the bridged C layer (
CLibAstronomy) - Numerical inputs that cause crashes, infinite loops, or undefined behavior
- Thread-safety issues in shared state (e.g. the fixed-star calculation slot)
Reports on cosmetic issues, DocC content, or upstream Astronomy Engine bugs unrelated to the Swift bridge should be filed as regular GitHub issues.