This project is pre-1.0 and under active development. Security fixes are applied to the latest released version. Please make sure you are on the most recent version before reporting an issue.
| Version | Supported |
|---|---|
| Latest release | ✅ |
| Older versions | ❌ |
Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Instead, use GitHub's private vulnerability reporting:
- Go to the repository's Security tab.
- Click Report a vulnerability (GitHub Private Vulnerability Reporting).
- Provide as much detail as you can (see below).
This opens a private channel visible only to the maintainers.
- A description of the vulnerability and its potential impact
- Steps to reproduce (a minimal proof of concept is ideal)
- Affected version(s) and environment details
- Any suggested remediation, if you have one
- We will acknowledge your report as soon as we are able.
- We will investigate, keep you informed of progress, and work on a fix.
- Once a fix is released, we are happy to credit you for the discovery unless you prefer to remain anonymous.
Thank you for helping keep this project and its users safe.