Version 0.1.1 of ph-color and version 0.1.0 of ph-color-bake are the supported releases. Older releases may be assessed case by case after later versions exist, but users should expect to upgrade to the latest compatible release.

Do not disclose a suspected vulnerability in a public issue or discussion. Email steve@giacomelli.ca with:

• the affected crate and version;
• a description of the issue and its impact;
• reproduction steps or a minimal example;
• any suggested mitigation, if known.

Reports will be acknowledged privately. A coordinated fix and disclosure will be prepared when the issue is confirmed.

ph-color is a no_std math library. Relevant concerns include integer overflow or wraparound on public paths, panics on public paths, violations of type-state guarantees, incorrect generated tables, and any future unsafe code (currently forbidden).

Issues limited to color accuracy or documented approximation bounds may be ordinary correctness bugs rather than security vulnerabilities; report those through the public issue tracker unless disclosure would create a concrete security risk.