As a pre-1.0 package, only the latest minor version receives security fixes.

To report a security vulnerability, please use one of the following methods:

• Preferred: GitHub Security Advisories
• Email: security@savvyweb.systems

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

• Acknowledgment: Within 72 hours of report
• Initial assessment: Within 1 week
• Fix or mitigation: Dependent on severity and complexity

We appreciate responsible disclosure and will credit reporters in release notes unless anonymity is requested.