Security Policy

Supported Branch

Security updates are made on main.

Reporting

Use GitHub Security Advisories, or open [SECURITY] issue without exploit detail.

Targets

  • Triage: 7 days
  • Critical/high remediation target: 14 days