SECURITY.md

Security Policy

Supported versions and vulnerability reporting.

Security Policy

Supported Versions

This project is pre-1.0. Security fixes are applied to the latest release on main.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Instead, use one of these channels:

When reporting, please include:

  • A clear description of the issue
  • Reproduction steps or a proof of concept
  • Impact assessment
  • Any suggested mitigation if you have one

I will acknowledge valid reports as quickly as possible and work on a fix before public disclosure when feasible.