The main branch is actively maintained. Point releases or tags may receive targeted fixes at the maintainers' discretion.

• Provide detailed steps to reproduce, including configuration and environment information.
• Do not disclose the issue publicly until we have confirmed and released a fix.
• We will acknowledge receipt within five business days and strive to provide regular status updates until the issue is resolved.

Public issues or pull requests describing exploitable vulnerabilities may be closed in favor of a coordinated disclosure.