If you've found a security issue, please don't file a public issue.

Email or contact via https://hasstechapi.com/contact with the details. We aim to acknowledge within 72 hours.

When you report, please include:

• A description of the issue and where it lives
• Steps to reproduce
• The potential impact you see
• Any suggested mitigation

We follow coordinated disclosure. We'll work with you on a fix, and credit you in release notes once a fix is deployed (unless you'd rather stay anonymous).

This policy covers any HassTech-owned project under github.com/algasid7e.