If you discover a security vulnerability, please do not open a public issue.

Instead, report it privately via GitHub Security Advisories. We aim to respond within 3 business days.

For urgent issues you may also email support@verygoodplugins.com.

The latest minor release on the default branch receives security updates. Older versions may be patched on a case-by-case basis.

We follow coordinated disclosure: we'll work with you on a fix and credit you in the release notes if you wish.