Security fixes are released for the latest stable line. Versions below 1.0 are pre-release and are not maintained.

Please report security vulnerabilities privately — do not open a public issue.

Use either channel:

• GitHub Security Advisories — open the repository's Security tab and choose Report a vulnerability.
• Email — alexandreluisbarreto@gmail.com.

Include the affected version, a description of the issue, and steps to reproduce.

• We aim to acknowledge your report within 5 business days.
• We will keep you informed of progress while we investigate and prepare a fix.
• Once a fix is released, we will credit you in the advisory unless you prefer to remain anonymous.

Please give us a reasonable amount of time to address the issue before any public disclosure.