Only the latest beta and release builds receive active security updates.
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1 | ❌ |
We take the security of Bandcore and our users' data seriously. Because this application interacts with third-party APIs (Bandcamp, Last.fm, Discord), security reports are handled with high priority.
If you discover a vulnerability or security issue:
- Do not open a public GitHub issue.
- Please email the maintainer directly at https://github.com/Nai64/BandcoreDesktop/security/advisories/new with the subject line
[SECURITY] Bandcore vulnerability report. - Include a description of the vulnerability, steps to reproduce it, and any potential impact.
You can expect an initial acknowledgment within 48 to 72 hours. If the issue is validated, a patch will be prepared and released as soon as possible, and you will be credited in the release notes (unless you prefer to remain anonymous).