mp-units/SECURITY.md

Security Policy

Supported versions

Security fixes are applied to the latest released version of mp-units. Please upgrade to the most recent release before reporting an issue.

Reporting a vulnerability

Please report security vulnerabilities privately, not through public issues or discussions.

The preferred channel is GitHub's private vulnerability reporting: open the repository's Security tab and click "Report a vulnerability". This creates a private advisory visible only to the maintainers.

If you cannot use that channel, email the maintainer at mateusz.pusz@gmail.com.

You can expect an initial response within a few days. Once a fix is ready, we will coordinate disclosure and credit you in the advisory, unless you prefer to remain anonymous.