Security
Supported Versions
Only the latest release is actively supported.
| Version | Status |
|---|---|
| Latest release | ✅ Supported |
| Older releases | ❌ Unsupported — upgrade to latest |
main branch | ⚠️ Best effort (development) |
Reporting a Vulnerability
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately via GitHub Security Advisory.
- Go to the repository's Security tab
- Click Report a vulnerability
- Fill out the form with details of the issue
You can expect an acknowledgement within 48 hours and a resolution within 90 days.
Disclosure Policy
- Vulnerabilities are disclosed privately to the maintainers first
- A fix is prepared before public disclosure
- Public disclosure happens after a fix is released or 90 days have passed, whichever is sooner