The maintainer accepts security reports for the latest tagged release and the current main branch. Older releases do not receive separate security fixes. Update to the latest release before checking a known issue.

Open a GitHub issue titled "Security contact request". Ask the maintainer for a private follow-up channel. Do not include exploit details, credentials, personal data, or private league data in the public issue. After the maintainer supplies a private channel, send the affected version, reproduction steps, impact, and a proposed fix if available.

The maintainer reviews the report and coordinates a fix and disclosure date with the reporter. This project has no guaranteed response time. If you receive no response, add a follow-up to the contact request. Wait for coordinated disclosure before you publish exploit details.

For ordinary bugs and support questions, use the issue tracker.