Buiy is pre-1.0 (0.0.x) and under active development. Only the latest main is supported; there are no backported security fixes for older commits or tags.

Please do not open a public issue for security problems.

Report privately through GitHub's Private vulnerability reporting (Security → Advisories → "Report a vulnerability" on this repository). If that is unavailable to you, email intendednull@pm.me instead.

Please include enough detail to reproduce: the affected component, the version / commit, and a proof of concept where possible.

We will acknowledge the report, investigate, and coordinate a fix and disclosure with you. As a pre-release project maintained on a best-effort basis, we cannot commit to a fixed response-time SLA, but we take supply-chain and memory-safety issues seriously and will prioritize them.