At this stage, only the current repository state on the default branch should be considered supported for security fixes.
| Version | Supported |
|---|---|
| Current default branch | Yes |
| Older snapshots / forks | No |
Please do not open a public GitHub issue for suspected security vulnerabilities.
Preferred process:
- Use GitHub private reporting or a private maintainer contact channel if available.
- Include reproduction details, impact, and any relevant logs or screenshots.
- Allow time for triage and remediation before public disclosure.
If no private reporting channel is configured yet, contact the repository owner privately through GitHub before disclosing details publicly.