Security Policy
Supported Versions
Pair v4 is the current stable line and is used in production by the maintainer. Pair v3 remains supported as a maintenance line for existing applications.
| Version | Supported |
|---|---|
4.x / main |
Yes |
3.x |
Maintenance fixes only |
< 3.0 |
No |
Reporting a Vulnerability
Do not report security vulnerabilities in public GitHub issues.
Report suspected vulnerabilities through GitHub private vulnerability reporting when available, or contact the maintainer privately through the project owner profile. Include:
- affected Pair version or branch
- a minimal reproduction or clear attack path
- expected impact
- any known workaround
The maintainer will confirm receipt, assess the report, and coordinate a fix or advisory when the issue is accepted.