The following versions of lip are currently supported with security updates:
Version | Supported |
---|---|
0.29.x | ✅ |
< 0.29.0 | ❌ |
We take the security of lip seriously. If you believe you've found a security vulnerability, please follow these steps:
- Do not disclose the vulnerability publicly until it has been addressed by the maintainers.
- Report your findings to GitHub Security Advisories. Please include:
- A description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any suggested mitigations if you have them
- Initial Response: Within 48 hours, acknowledging receipt of your report
- Status Update: Within 5 business days, with a more detailed response about the vulnerability
- Patch Timeline: Depending on severity, we aim to release patches within 14 days for critical issues
We kindly ask you to:
- Allow us time to investigate and address the vulnerability before publicizing it
- Not access or modify data that doesn't belong to you
- Act in good faith to avoid service disruptions and privacy violations
We're grateful to those who report vulnerabilities responsibly. With your permission, we'll acknowledge your contribution when we release a fix.