Security Policy

Supported Versions

We release patches for security vulnerabilities for the following versions:

Version	Supported
1.1.x	✅
1.0.x	✅
< 1.0	❌

Reporting a Vulnerability

If you discover a security vulnerability, please report it by:

1. Email: Send details to [email protected]
2. GitHub Security Advisory: Open a private security advisory at https://github.com/1160054/claude-code-zsh-completion/security/advisories/new

Please do not report security vulnerabilities through public GitHub issues.

We will acknowledge your report within 48 hours and will send a more detailed response within 7 days indicating the next steps.

Security Update Process

1. The security report is received and assigned to a handler
2. The problem is confirmed and affected versions are determined
3. A fix is prepared and tested
4. A new release is published with the fix
5. The vulnerability is publicly disclosed after users have had time to update

Thank you for helping keep this project secure!