If you find a security issue in butterstack-cli, such as a credential being sent to the wrong host, an auth bypass, or anything else that could expose a user's ButterStack account, please do not open a public GitHub issue.

Instead, email hello@butterstack.com with details. We will acknowledge receipt and work with you on a fix and disclosure timeline.

This project is pre-1.0. Security fixes land on the latest published version; there is no separate maintenance branch at this stage.