The latest release branch is supported with security fixes when feasible.
If you discover a security issue, please do not open a public issue first.
Please report privately by contacting the maintainer through GitHub:
- Open a private security advisory (preferred), or
- Contact via repository owner profile.
Include:
- Steps to reproduce
- Impact assessment
- Suggested mitigation (if any)
We will acknowledge the report as soon as possible and coordinate a fix/release.