Skip to content

Security: VirusAid/potok

Security

SECURITY.md

Security Policy

Status

potok is a young concurrency runtime. Its coroutine machinery and synchronization primitives are covered by a functional test suite, including concurrency stress tests (a multi-worker mutex contention test and a multi-thousand-item channel pipeline) run repeatably. It has not yet had large-scale production exposure or a formal race audit — validate it under your own workloads and, ideally, a thread sanitizer before relying on it in production.

Reporting a Vulnerability

Please do not open a public issue for security-sensitive problems (for example, a data race or use-after-free reachable through the public API).

Use the private GitHub Security Advisories channel (the Security → Report a vulnerability tab in the repository). We aim to respond within 7 days.

Scope

This is a general-purpose concurrency library. Correctness concerns (data races, deadlocks, coroutine-lifetime bugs) are in scope. It performs no I/O and processes no untrusted input itself.

There aren't any published security advisories