Security fixes are applied to the latest minor release line in active development (currently 0.2.x). Older releases may not receive backports.

Please do not open a public GitHub issue for undisclosed security problems.

Instead, use GitHub Security Advisories for this repository (preferred), or contact the maintainers privately through the options enabled on the project.

Include:

• A short description of the issue and its impact
• Steps to reproduce (proof-of-concept if possible)
• Affected versions or components, if known

Maintainers will aim to acknowledge reports promptly and coordinate disclosure after a fix is available.