The latest version of the default branch is supported with security updates. Older branches, tags, and commits may not receive security fixes.

Do not disclose vulnerabilities through regular GitHub issues.

Use the repository's Security tab and select Report a vulnerability as the primary reporting method. If private vulnerability reporting is unavailable, email hi@kikuai.dev.

Please include, when possible:

• the affected component;
• steps to reproduce the issue;
• the expected security impact; and
• a possible fix or mitigation.