Only the latest release (0.x series) receives security updates. Older versions are unsupported.
Please report security vulnerabilities privately through GitHub Security Advisories — this ensures responsible disclosure.
Do not open a public issue for security vulnerabilities.
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if known)
We aim to acknowledge reports within 7 days and will communicate a remediation timeline.
Security vulnerabilities include:
- Dependency vulnerabilities
- Command injection
- Data exposure
- Authentication/authorization flaws
- Other security-critical issues
These are bugs, not security issues:
- Feature requests
- Non-security functionality bugs
- Performance problems
- UI/UX issues
Report these via GitHub Issues.