Security Policy

Supported versions

Zero is in early development and has no stable release yet. Security fixes are applied to the main branch. Once releases begin, this section will list the versions that receive security updates.

Reporting a vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately using one of:

• GitHub private vulnerability reporting (preferred), or
• Email nimbartevedant@gmail.com with the subject line SECURITY.

Please include:

• A description of the vulnerability and its impact.
• Steps to reproduce, or a proof of concept.
• Affected component, version, or commit.
• Any suggested mitigation, if known.

What to expect

• We aim to acknowledge your report within 72 hours.
• We will keep you informed of progress toward a fix.
• We will credit you in the release notes when the fix ships, unless you prefer to remain anonymous.

Please give us reasonable time to address the issue before any public disclosure.