helpers4 0.0.6

General-purpose Rust helpers, one crate, one feature per module (string, array, ...)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

<!--
  This file is part of helpers4.
  Copyright (C) 2025 baxyz
  SPDX-License-Identifier: LGPL-3.0-or-later
-->

# Security Policy

## Supported versions

| Version | Supported |
| ------- | --------- |
| 2.x (latest stable) | ✅ |
| < 2.0 | ❌ |

Only the latest stable release receives security fixes.

## Reporting a vulnerability

**Please do not open a public GitHub issue for security vulnerabilities.**

Use GitHub's private vulnerability reporting to send a confidential report directly to the maintainer:

👉 **[Report a vulnerability privately](https://github.com/helpers4/rust/security/advisories/new)**

This keeps the details private until a fix is released.

### What to include

- A description of the vulnerability and its potential impact
- Steps to reproduce or a minimal proof of concept
- Affected version(s)
- Any suggested mitigation (optional)

## Response timeline

| Step | Target |
| ---- | ------ |
| Initial acknowledgement | ≤ 7 days |
| Status update | ≤ 14 days |
| Fix released (if confirmed) | As soon as practical |

## Scope

The `helpers4` crate is a set of Rust utility functions with no third-party dependencies by default. The attack surface is limited to:

- **In scope**: bugs in helper logic that could cause incorrect behavior when processing untrusted input (e.g., panics on crafted input, quadratic-time behavior)
- **Out of scope**: vulnerabilities in devDependencies that do not affect the published packages, or issues requiring physical access to the developer's machine

## Disclosure policy

Once a fix is available, the vulnerability will be disclosed via a [GitHub Security Advisory](https://github.com/helpers4/rust/security/advisories) and noted in the [CHANGELOG](./CHANGELOG.md).