Before the first stable release, only the latest revision of the main branch is supported with security fixes.

Do not open a public issue for a suspected vulnerability. Submit it through GitHub private vulnerability reporting.

Repository maintainers aim to acknowledge reports within three business days and provide a status update within seven business days. Disclosure timing is coordinated with the reporter so users can update safely.