If you discover a security vulnerability in OpenIRBlaster, please report it responsibly:

1. Do not open a public GitHub issue for security vulnerabilities
2. Use GitHub's private vulnerability reporting
3. Or contact the maintainer directly

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact

You can expect acknowledgment within 48 hours and a status update within 7 days.

This security policy covers:

• Home Assistant Integration (custom_components/openirblaster/)
• ESPHome Firmware (hardware/firmware/)

For vulnerabilities in Home Assistant or ESPHome themselves, please report to their respective security teams:

• Home Assistant Security
• ESPHome