Unless otherwise noted in a specific repository's own SECURITY.md, only the latest released version of a project is actively supported with security updates.
If you discover a security vulnerability, please do not open a public issue. Instead, report it privately:
- Email: yusronmuttaqin0217@gmail.com
- Subject line:
[SECURITY] <repo-name> - short description
Please include as much detail as possible:
- Affected repository and version/commit
- Steps to reproduce or a proof of concept
- Potential impact
You should expect an initial response within 5 business days. If the report is confirmed, a fix will be prioritized and a coordinated disclosure timeline will be agreed upon before any public disclosure.
Thank you for helping keep this ecosystem of projects safe.