The latest stable release is supported for security fixes. Older releases are not supported. This policy promises no response or resolution deadline.

Email contact@devlsh.com privately. Do not open a public vulnerability issue or post exploit details in Discussions or pull requests.

Include the affected package version and export, a description of the impact, and a minimal reproduction using synthetic data. Redact credentials, tokens, private configuration, and personal information from all examples and logs. Do not send live credentials.

Coordinate disclosure privately with the maintainer before publishing details. For non-security bugs or usage questions, follow Questions And Reports.