We actively support the latest minor release of spicetify-connect-api with security updates.
| Version | Supported |
|---|---|
| 0.3.x | ✅ |
| < 0.3 | ❌ |
We take security issues in spicetify-connect-api seriously. If you discover a security vulnerability, please do not create a public GitHub issue.
- GitHub Security Advisory (Preferred): Report privately via GitHub Security Advisories.
- Email: Send a report directly to support@tobfd.de.
- A description of the vulnerability and its potential impact.
- Clear steps or a minimal proof-of-concept script to reproduce the issue.
- Any suggested remediations (if available).
- Acknowledgment: Within 48 hours of receiving your report.
- Updates: Periodic updates on progress toward a resolution.
- Credit: Once a security patch is released, we will credit you in the release notes (unless you prefer to remain anonymous).