pgdeclare runs DDL with whatever privileges you give it, so we take reports seriously.

Please report vulnerabilities privately to security@powertime.org. Do not open a public issue or pull request.

Include what you found, how to reproduce it, the affected version, and the impact you expect. We will acknowledge the report, keep you informed while we work on a fix, and credit you in the release notes unless you prefer otherwise.

Until 1.0 only the latest release receives fixes.