Security fixes are addressed for the latest published 1.x release. Older releases may not receive fixes; upgrade before requesting support.

Report suspected vulnerabilities privately by email to contact@alperdev.codes. Include reproduction steps, affected version, environment details, and minimum safe evidence needed to confirm issue.

Do not include credentials, tokens, private source code, personal data, or other sensitive details in public issue. Do not disclose vulnerability details publicly until fix or mitigation has been coordinated.

Reports are reviewed privately. Disclosure timing is coordinated with reporter based on impact, affected versions, and fix availability.

Use public issues for non-sensitive bugs and feature requests.