Only the latest commit on main is supported. Older tags and releases get no fixes.

Report privately through GitHub's private vulnerability reporting — the Security tab of this repository. Please do not open a public issue for a security problem.

This is a personal starter project maintained in spare time: there is no bounty, and replies are best effort, usually within two weeks. Fixes land on main, and the advisory is published once a fix is available.