| Version | Supported |
|---|---|
| latest (main) | ✅ |
| < 1.0 | ❌ |
Do not report security vulnerabilities through public GitHub issues.
yaraforge is a security tool — responsible disclosure matters here.
- GitHub Security Advisories (preferred): Report privately via this repo.
- LinkedIn: Message @srinikhilchakilam directly.
| Action | Timeline |
|---|---|
| Acknowledgement | Within 48 hours |
| Initial assessment | Within 5 business days |
| Fix / mitigation | ≤ 30 days (critical), ≤ 90 days (others) |
Researchers will be credited in release notes unless anonymity is requested.