Only the latest major version receives security fixes.
| Version | Supported |
|---|---|
| 1.x | Yes |
| < 1.0 | No |
Do not open a public GitHub issue for security vulnerabilities.
Instead, use GitHub's private vulnerability reporting or email rtorcato@me.com with:
- A description of the vulnerability
- Steps to reproduce
- Potential impact
You'll receive a response within 5 business days. Once the issue is confirmed and a fix is ready, a patch release will be published and the advisory will be made public.