Security updates and vulnerability patches are provided for the following versions:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0.0 | ❌ |
If you identify a potential security vulnerability in SilkPlayer, please do not disclose it publicly in an open issue. Instead, report it through one of the following channels:
- GitHub Security Advisories: Submit a private report via the "Security" tab on the GitHub repository.
- Direct Maintainer Contact: Open a confidential communication containing:
- A clear description of the vulnerability.
- Minimal reproduction steps or sample files.
- Operating system and hardware platform details.
- Assessment of potential security impact.
Reports will be acknowledged within 48 hours, and confirmed issues will be addressed in an expedited release.