Security Policy

Supported Versions

The latest 1.x release receives security fixes.

Reporting a Vulnerability

Do not report suspected vulnerabilities in a public issue. Email chase@crumbls.com with a description, affected versions, and reproducible steps. We will acknowledge receipt within two business days and work with you on a coordinated disclosure.