# Security Policy

## Reporting a vulnerability

If you believe you have found a security vulnerability, please report it
privately if possible.

Preferred:

- Use GitHub Security Advisories ("Report a vulnerability") if enabled.

Fallback:

- Open a GitHub issue with minimal details and ask for a private channel.

We will acknowledge reports as soon as possible and work on a fix.

## Supported versions

This project is under active development. Security fixes are applied to the
main branch. If you need a coordinated release process, please mention that in
your report.