Security

Supported versions

Until 1.0.0, only the latest published 0.x version of @deancochran/ftms receives security fixes. C is also released; see the current release matrix. This policy does not establish a C maintenance window or response-time guarantee. Reports affecting any implementation are welcome through the private channel below. C, Swift, Kotlin, Python and Rust have independent versions; include the exact package version, tag and commit when reporting. Host tests and publication do not imply Bluetooth qualification or safe equipment-control execution.

Reporting a vulnerability

Use GitHub private vulnerability reporting for deancochran/ftms. Do not disclose suspected vulnerabilities, device identifiers, private captures, credentials, or personal data in a public issue.

Include the affected version, expected and actual behavior, impact, and a minimal redacted reproduction when possible.