Security fixes are applied to the current public major release line.

At launch, that is:

• 1.x

Pre-launch 0.1.x versions are not supported for public security maintenance.

Do not open a public GitHub issue for a suspected security vulnerability.

Report it privately through one of these channels:

• GitHub Security Advisory for this repository
• email: garaekz@gmail.com

Please include:

• affected version
• impact and attack scenario
• reproduction steps or proof of concept
• any suggested mitigation if you already have one

We will acknowledge valid reports as quickly as possible and coordinate a fix before public disclosure when appropriate.