Security fixes are provided for the latest tagged release of CustomKit.
| Version | Supported |
|---|---|
| 0.2.x | Yes |
| 0.1.x and earlier | No |
Do not open a public issue for a suspected vulnerability. Contact Kaizōsha through kaizosha.org with a clear description, reproduction steps, affected version, and expected impact.
CustomKit is a local user-interface package with no networking, persistence, analytics, or third-party dependencies. A report is still welcome when a control can expose host-application data, bypass an expected interaction boundary, or cause a denial of service.