Where this file is silent, the laranail security policy applies.

Security fixes land on the latest 0.1.x release. The package is pre-1.0 and older tags are not backported.

Email security@simtabi.com with a description of the issue, the affected version, and — where you can — a minimal reproduction. You can also use GitHub's private vulnerability reporting.

Please do not open a public issue for a security report.

Expect an acknowledgement within three working days and an assessment of severity and a fix timeline once the report is confirmed. Please keep the report private until a fix has shipped; credit is given in the release notes unless you would rather stay anonymous.