Only the latest release of each project receives security fixes.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Older releases | No |
Do not open a public GitHub issue for security vulnerabilities.
Send a private report to: joyousmerit@gmail.com
Include:
- Description of the vulnerability and potential impact
- Affected component, version, or commit range
- Steps to reproduce or a minimal proof-of-concept
- Any suggested mitigations
| Milestone | Target |
|---|---|
| Acknowledgement | Within 48 hours |
| Status update | Within 7 days |
| Fix or disclosure decision | Within 30 days (critical issues sooner) |
A security advisory will be published on GitHub once a fix is available. Credit is given in the release notes unless you prefer to stay anonymous.