Hoppy's Adventure Arcade is an offline desktop game with no networking. It writes only local save data under Godot's user:// directory. Security issues are therefore unlikely, but we still take them seriously. Examples: crafted save or config files that execute code, or a compromise of our build or CI pipeline.

Please do not open a public issue. Report it privately through GitHub instead: go to the Security tab and choose Report a vulnerability.

We aim to acknowledge reports within 5 business days. We'll keep you updated until the issue is resolved.

Only the latest release and main receive fixes.