Only the latest major version is supported. Older versions will not receive security fixes.
Security sensitive issues should be reported directly to the project maintainer
by emailing [email protected]
.
A maintainer will respond to your report within 48 hours.
All releases will be tagged and signed with one of the following GPG signing keys:
82214D7FB54DC9A3BC0CDAE116D5138E52B849B3
Keys may be pulled from your keyserver of choice and verifications can be performed using Git:
$ gpg --recv-keys 82214D7FB54DC9A3BC0CDAE116D5138E52B849B3
$ git verify-tag v0.21.4