# Security policy

Heart Atlas is a static website with no accounts or user data, but vulnerabilities are still possible (for example in dependencies, build scripts or the embed page).

## Reporting a vulnerability

Please do not open a public issue. Report privately through **Security → Report a vulnerability** in this repository (GitHub private vulnerability reporting). You should get a first response within 7 days.

## Supported versions

Only the latest version on the `main` branch is supported.