Once a stable 1.0.0 is released, this table will be updated to reflect the support window.

Please do not report security vulnerabilities through public GitHub Issues.

To report a vulnerability, use GitHub's private vulnerability reporting or email the maintainer directly (see the GitHub profile for contact information).

Please include as much of the following information as possible to help understand and reproduce the issue:

• Type of issue (e.g. injection, path traversal, credential exposure)
• Affected package(s) and version(s)
• Step-by-step instructions to reproduce
• Proof-of-concept code or exploit (if available)
• Impact assessment

You should receive a response within 72 hours. If you do not, please follow up.

We follow responsible disclosure: we will work with you to understand and remediate the issue before public disclosure. We aim to release a fix within 14 days of confirmation.