If you discover a security vulnerability, please report it via GitHub Security Advisories (preferred) or email.
- Response time: Acknowledgment within 48 hours, assessment within 1 week
- Please do not open a public issue for security vulnerabilities
| Version | Supported |
|---|---|
| Latest | Yes |
- Dependencies managed with lockfile pinning and automated updates via Renovate
- GitHub Actions pinned to commit SHAs
- Dependabot alerts and secret scanning enabled