Do not open a public issue for a vulnerability. Use GitHub private vulnerability reporting on https://github.com/PerryLink/dsh-plugin-portal/security/advisories/new when available, or contact the maintainer listed in the repository.

Include the affected version, a minimal reproduction and the impact. This is a best-effort community project.

This policy covers this repository, not the DSH host or third-party services.