The SECURITY.md version table on master is outdated:
-
1.2.x is marked as security-supported, but the 1.2.9 release notes
state: "This is likely the final 1.2.x release, please migrate to using 1.4.x." It should be marked as EOL.
-
2.0.x says "(not released)" but there have been 20 beta releases (up to 2.0.0b20). While no stable release exists yet, "(not released)" is misleading. "(beta)" would be more accurate.
Proposed updated table:
| Version |
Supported |
| 2.0.x |
❌ (beta) |
| 1.4.x |
✅ |
| 1.2.x |
❌ (EOL) |
| 1.1.x |
❌ |
| < 1.1 |
❌ |
Note: The 1.4-maint branch SECURITY.md also lists 1.2.x as supported and could benefit from a similar update in a follow-up.