# Security Policy

## Supported Versions

Currently, the following versions of `cds-text-sync` are supported with security updates:

| Version | Supported          |
| ------- | ------------------ |
| 0.9.x   | :white_check_mark: |
| < 0.9.x | :x:                |

## Reporting a Vulnerability

We take the security of this project seriously. If you find a security vulnerability, please do NOT open a public issue. Instead, please report it via GitHub's **Private Vulnerability Reporting** feature:

1. Navigate to the **Security** tab of this repository.
2. Select **Vulnerability reporting** from the left sidebar.
3. Click **Report a vulnerability**.

We will acknowledge your report and work on a fix as soon as possible. Once the fix is released, we will give you credit for the discovery (unless you prefer to remain anonymous).

## Warning on Third-Party Scripts
As stated in the README, this is a third-party tool. Always review scripts before running them in a production PLC environment, as scripts have significant access to your CODESYS project data.
