This project is currently pre-1.0. Until the first stable release, security fixes are applied to the latest published version only. Once 1.0 is released, the most recent 1.x line will receive security updates.

Please report security vulnerabilities privately rather than opening a public issue. You can:

• Email matt@suhock.net, or
• Use GitHub's private vulnerability reporting on the repository.

Please include enough detail to reproduce the issue, such as affected versions, a description of the impact, and any proof-of-concept code.

• We will acknowledge your report after receiving it.
• We will investigate, keep you informed of progress, and work toward a fix.
• We follow coordinated disclosure: please give us a reasonable opportunity to release a fix before any public disclosure.

Thank you for helping keep the project and its users safe.