Only the latest release on the main branch is actively supported with security updates.

If you discover a security vulnerability, please do not open a public issue.

Instead, report it privately via email to fabian.wimberger@proton.me.

You can expect:

• An acknowledgement within 48 hours.
• A timeline for a fix or mitigation within 7 days.
• Credit in the release notes (unless you prefer to remain anonymous).

Thank you for helping keep this project secure.