Security Policy

Supported versions

Security fixes are provided for the latest published release of python-package-copier-template. Older releases are not supported; upgrade to the latest release before checking whether a vulnerability still applies.

This policy covers the template package and its generated defaults. For a vulnerability specific to a generated project, follow that project’s security policy and contact its maintainers.

Reporting a vulnerability

Report suspected vulnerabilities privately to gaitan@gmail.com (Martín Gaitán). Do not disclose security-sensitive details in public issues or pull requests.

Include the affected version or commit, relevant Python and operating system versions, the potential impact, and steps to reproduce the issue. A minimal proof of concept is helpful. Do not include credentials or other private data.

We aim to acknowledge reports, assess their impact, and keep reporters informed as we investigate. Response and remediation times depend on maintainer availability, severity, and complexity; no fixed deadlines are guaranteed.

For confirmed vulnerabilities, we coordinate a fix, release, and public disclosure with the reporter. Please allow time for investigation and remediation before publishing details. Let us know whether you would like to be credited or remain anonymous.