This project is in active development. Only the latest release receives security updates.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately via GitHub's security advisory feature: Report a vulnerability

You can expect an acknowledgement within 48 hours and a status update within 7 days.

If the vulnerability is accepted, we will publish a fix and a public advisory together. If it is declined, we will explain why.