We aim to keep the latest stable version secure and supported.
If you discover a security issue, please report it privately and do not open a public issue.
Include:
- A clear description of the issue
- Steps to reproduce
- Impact or risk level
- Any relevant screenshots, logs, or proof of concept
- We will review the report as soon as possible
- We may ask for more details
- We will fix confirmed issues and release an update when needed
This policy applies to the repository code, dependencies, and related project services.
Please give us time to investigate and fix the issue before public disclosure.