# Security Policy

See [README's Security section](./README.md#security) for detailed description of internal security practices.

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| >=1.8.0   | :white_check_mark: |
| <1.8.0   | :x:                |

## Reporting a Vulnerability

Use maintainer's email specified at https://paulmillr.com

It's preferred that you use
PGP key from [pgp proof](https://paulmillr.com/pgp_proof.txt) (current is [697079DA6878B89B](https://paulmillr.com/pgp_proof.txt)).
Ensure the pgp proof page has maintainer's site/github specified.

You will get an update as soon as the email is read; a "Security vulnerability" phrase in email's title would help.
