Security Policy

Supported Versions

Security fixes target the latest published major version of Coaction packages. Older versions may receive fixes when the affected code path is still maintained and a safe patch is practical.

Reporting a Vulnerability

Please do not open a public issue for a suspected vulnerability.

Report security concerns through GitHub private vulnerability reporting if it is available for this repository. If that path is unavailable, email the maintainer listed in package.json.

Include:

• affected package and version
• a minimal reproduction or proof of concept
• expected impact
• any known workaround

The maintainer will acknowledge valid reports as soon as practical and will coordinate disclosure timing before publishing details.