We take security seriously and strive to ensure that all released versions of this project are secure. Below are the versions currently supported for security updates:
| Version | Supported |
|---|---|
| 1.x.x | ✅ |
| < 1.0 | ❌ |
If you discover a security vulnerability in this repository, please follow the steps below to report it responsibly:
-
Do not open a public issue.
To protect users of the project, please avoid discussing any vulnerabilities in public issues or pull requests. -
Contact us privately.
Send details of the vulnerability to the repository maintainer at:- Email: [your-email@example.com]
- Alternatively, use GitHub's private vulnerability reporting.
-
Provide details.
Include the following information in your report:- A detailed description of the vulnerability.
- Steps to reproduce the issue or proof of concept (if applicable).
- Any potential impact or exploit scenarios.
-
Response Time.
We aim to respond to security reports within 72 hours. Patching timelines will depend on the complexity of the issue and potential impact.
When a vulnerability is fixed, we will:
- Publish a GitHub Security Advisory.
- Credit the reporter (if desired).
- Include a detailed changelog entry.
We value the community's efforts in making this project secure. Thank you for helping to keep this project safe for everyone!