Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
3.x	Yes
< 3.0	No

Reporting a Vulnerability

Please do NOT report security vulnerabilities through public GitHub issues.

Instead, please report them via email to the maintainer. You can find contact information on the GitHub profile.

What to include

Description of the vulnerability
Steps to reproduce
Potential impact
Suggested fix (if any)

What to expect

Acknowledgment within 48 hours
Status update within 7 days
We will work with you to understand and address the issue
Public disclosure after the fix is released

Disclosure Policy

We follow coordinated disclosure practices
We will credit reporters (unless they prefer anonymity)
Fixes will be released as patch versions

There aren't any published security advisories