Report security vulnerabilities in private. A public GitHub issue, discussion, or pull request is public disclosure.

Use Report a vulnerability on the security advisories page:

https://github.com/openframeworks/projectGenerator/security/advisories/new

If you cannot use that form, email of at openFrameworks [.cc].

This policy covers the projectGenerator command line tool, the desktop app, the scripts in this repository, and the packages published on the releases page.

Report a vulnerability in openFrameworks itself through the openFrameworks security policy.

Please include:

• the projectGenerator version or commit, and whether you used the command line tool or the desktop app
• the operating system, and the release package if you installed one (for example the nightly zip)
• what the issue is, and what the impact is
• steps to reproduce, or a proof of concept, when you have one

Maintainers will confirm the report on the advisory and coordinate a fix before publishing it.

Please report against master or the nightly release. Fixes are committed to master and published in the nightly release.