We take the security of Mako seriously. If you believe you have found a security vulnerability, please report it to us responsibly using the instructions below.

Only the latest release is actively supported for security updates.

Please do not report security vulnerabilities via public GitHub issues.

If you discover a vulnerability:

1. Email a detailed report directly to the maintainers at vigneshbalasubramaniyan3@gmail.com.
2. Include the following details in your report:
   • A description of the vulnerability and its potential impact.
   • Step-by-step instructions (or a proof-of-concept script) to reproduce the issue.
   • Any details about your local environment (OS, Go version, keychain provider).
3. We will acknowledge receipt of your report within 48 hours and coordinate a patch lifecycle before public disclosure.