Security policy

Drafted by Claude Opus 5.5 and reviewed by Christopher K. Long

Supported versions

Only the live website, which is built from the latest commit, is supported for security updates. The earlier versions of the site that it serves under /snapshots/ are kept as they were when they were published and are not updated.

Reporting a vulnerability

Please report vulnerabilities by opening a confidential issue, which only the maintainer can see, or email Christopher K. Long at security@christopher-k-long.ac.

Vulnerabilities in the software packages that the website documents (the git submodules in content/Software/*/Repository) should be reported to the package’s own repository instead, each of which has its own security policy.