| Version | Supported |
|---|---|
Latest 0.0.x |
Yes |
| Older releases | No |
After 0.1.0, the latest minor release will receive security fixes.
Please report security vulnerabilities through GitHub Security Advisories.
Do not open a public issue for security vulnerabilities.
- Acknowledgment — within 48 hours
- Assessment — within 1 week
- Fix timeline — depends on severity; critical issues are prioritized
This policy covers the dbport Python package and its CLI (dbp). It does not cover third-party services such as Iceberg REST catalogs or S3-compatible object stores.