# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability, please report it
responsibly. **Do not** open a public GitHub issue.

**Preferred:** Use [GitHub private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability)
via the **Security** tab of this repository.

**Alternative:** Email the maintainer (see `pyproject.toml` for
contact info) with:

- Description of the vulnerability
- Steps to reproduce
- Potential impact

You should receive a response within 48 hours.

## Supported Versions

Only the latest release is actively supported with security fixes.
