The following versions of Submodule-Forge are currently supported with security updates:

• ✅ Fully supported (receives security updates)
• ⚠️ Critical fixes only
• ❌ Not supported

If you discover a security vulnerability, please report it responsibly.

• Open a private report (preferred)
• Or contact via GitHub (Issues are allowed, but avoid posting sensitive details publicly)

• Initial response: within 48 hours
• Status updates: as needed
• Fix release: depends on severity

• The issue will be investigated
• A fix will be prepared
• A new release will be published

• You will receive an explanation
• Suggestions or alternatives may be provided

• Always use dependencies from trusted sources
• Keep your environment updated
• Avoid exposing sensitive data in repositories

Please do not publicly disclose vulnerabilities until they have been reviewed and fixed.

Thank you for helping keep Submodule-Forge secure 🙌