Currently, the FREAK compiler, standard library, and Hangar package manager are under active, rapid development. Security updates are prioritized for the latest stable release and the current active main branch.

We take security vulnerabilities in the FREAK compiler, runtime, and package manager seriously. If you discover a vulnerability, please do not disclose it publicly via public GitHub issues.

Instead, please report it privately:

1. Email: Send your report directly to theresa_apocalypse0@proton.me.
2. Details: Include a clear description of the vulnerability, affected components (e.g., runtime memory safety, LLVM code generation, or Hangar package resolution), and a minimal reproducible .fk script or test case if possible.

• Acknowledgment: You should receive acknowledgment of your report within 48 hours.
• Triage & Patch: Maintainers will triage the issue, confirm the severity, and prepare a patch privately.
• Disclosure: Once a fix is verified and deployed in a new release, a security advisory may be published crediting the reporter (if desired).