Rune Icons is distributed as the website at https://runeicons.com and the source in this repository. Only the latest commit on the main branch receives security updates.

If you discover a security vulnerability, please report it privately — do not open a public issue.

Email: hello@nexvyn.dev

Please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce, with example input where possible
• The affected URL, file, or commit

• Acknowledgement of your report within 7 days.
• A fix or mitigation on main as soon as one is available, depending on severity.
• Credit in the release notes on request, once the issue is resolved.

Thank you for helping keep Rune Icons safe for everyone.