Only the latest released version receives security fixes. Please update to the newest version before reporting a vulnerability.

If you discover a security vulnerability in this project, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, please use one of the following methods:

1. GitHub Security Advisory (preferred): Use the Report a vulnerability feature on this repository.
2. Private contact: Reach out to the maintainer @svasek via a private channel.

• A description of the vulnerability
• Steps to reproduce the issue
• The potential impact
• Suggested fix (if any)

• Acknowledgment of your report within 7 days
• An assessment and plan for a fix within 30 days
• Credit in the release notes (unless you prefer to remain anonymous)

This policy covers the neopool custom integration code in this repository. Issues related to Home Assistant Core, pymodbus, or other dependencies should be reported to their respective projects.