Only the latest release receives security updates. Older releases are not supported.
Report security vulnerabilities by email: security@attentionfirst.dev
Do not open a public GitHub issue for security vulnerabilities.
Include:
- A clear description of the vulnerability
- Steps to reproduce
- The affected version
- Potential impact
Expected response time:
- Acknowledgment within 48 hours
- Initial assessment within 7 days
We follow coordinated disclosure with a 90 day window.