Security Policy
Supported versions
| Version | Supported |
|---|---|
| The latest release (or the default branch, for repos that do not cut releases) | ✅ |
| Anything older | ❌ |
Security fixes ship as patch releases through release-please.
Reporting a vulnerability
Do not open a public issue. Report privately through GitHub’s private vulnerability reporting on the affected repository (Security → Report a vulnerability), or email amr.abdel@gmail.com.
Please include the affected repository and version or commit, what an attacker can do, and the steps to reproduce.
Response window
You will get an acknowledgement within 7 days. We then agree a fix timeline with you, and credit you in the advisory unless you ask us not to.