Use this section to view which versions of GitStreak are currently supported with security updates.
| Version | Supported |
|---|---|
| 1.1.x | ✅ |
| 1.0.x | ❌ |
| < 1.0 | ❌ |
We take the security of GitStreak seriously. If you discover a security vulnerability, please follow these steps to report it responsibly.
-
GitHub Private Vulnerability Reporting (Preferred):
- Navigate to the GitStreak Security Advisories page on GitHub.
- Click on "Report a vulnerability" to submit a private report.
-
Alternative Contact:
- If GitHub Private Vulnerability Reporting is unavailable, please open a GitHub Issue with minimal details and request a private communication channel, or reach out to the project maintainer directly.
Important
Please do not report security vulnerabilities through public GitHub issues or public discussions.
When you report a vulnerability:
- Initial Response: You will receive an acknowledgment of your report within 48 hours.
- Assessment & Updates: We will investigate the issue and provide updates on progress at least once every 3 to 5 business days.
- Resolution:
- If Accepted: A patch will be developed, tested, and released in an upcoming version (distributed via Sparkle automatic updates and GitHub Releases). You will be credited in the release notes if you wish.
- If Declined: We will provide a detailed explanation of why the reported issue is not considered a security vulnerability or security risk.