# Security Policy

## Supported Versions

Security fixes are handled on a best-effort basis for the latest release line.

| Version | Supported |
| --- | --- |
| 0.2.x | Yes |
| < 0.2.0 | No |

## Reporting a Vulnerability

Use GitHub Private Vulnerability Reporting.

1. Open the repository Security tab.
2. Click "Report a vulnerability".
3. Submit details and reproduction steps.

Direct link:

- https://github.com/ingolfured/gr-tdigest/security/advisories/new

Do not post vulnerability details in public issues.

If private reporting is unavailable for any reason, open a public issue titled `Security contact request` without technical details and ask for a private follow-up channel.
