Only the latest release receives security fixes.
Please report vulnerabilities privately, not in a public issue:
- Go to the Security tab of this repository.
- Choose Report a vulnerability and describe the problem, the affected version, and steps to reproduce it.
You can expect an initial response within a few days. Once a fix is released, the report can be published as a security advisory with credit to you, if you want it.
DeckyHub only downloads release assets from GitHub and hands them to Decky Loader's installer. Issues in third-party plugins listed in its registry, in Decky Loader itself, or in GitHub should be reported to their respective maintainers. The policy DeckyHub follows for downloads and tokens is in CONTRIBUTING.md.