# Security Policy

## Reporting a vulnerability

Please do **not** open a public issue for security vulnerabilities.

Report them privately via GitHub's Security Advisories:

1. Go to the repository's **Security** tab
2. Click **Report a vulnerability**
3. Describe the issue, affected versions, and steps to reproduce

You can also email the maintainer directly: alhan@softmediadesign.com

We will acknowledge reports within 5 business days and keep you informed as the
issue is triaged and fixed. Please allow time for a fix to be released before
disclosing the vulnerability publicly.

## Supported versions

| Version | Supported          |
|---------|--------------------|
| latest  | ✅ Fully supported  |
| older   | ❌ Best effort only |

We recommend always running the latest release.