Only the latest stable release is supported. The current supported release is v0.1.0. When a newer stable release is published, support moves to that release.

This policy covers vulnerabilities in PHP Runtime Audit itself, not findings the scanner reports in projects it scans.

Please do not post vulnerability details in a public issue. Use GitHub's Report a vulnerability option on the repository's Security tab to contact the maintainer privately. If private reporting is unavailable, open an issue asking for a private reporting channel without including technical details.