Security

SECURITY.md

Security Policy

Supported Versions

This project is actively maintained on the main branch.

Reporting a Vulnerability

Please do not report security vulnerabilities in public GitHub issues.

To report a vulnerability, contact the maintainer directly and include:

a clear description of the issue
affected files and components
steps to reproduce
potential impact
suggested mitigation (if available)

You can also use GitHub's private vulnerability reporting feature:

Repository -> Security -> Report a vulnerability

Response Expectations

Initial acknowledgment target: within 72 hours
Follow-up with triage and next steps after validation

Disclosure

After a fix is prepared and released, disclosure details may be published in:

GitHub Security Advisories
repository changelog or release notes

There aren’t any published security advisories