Security fixes are provided for the latest released minor version and the one immediately preceding it.
| Version | Supported |
|---|---|
| latest minor | ✅ |
| previous minor | ✅ |
| older | ❌ |
While the SDK is pre-1.0 (0.y.z), only the latest published release is
actively supported.
Please do not open a public issue for security vulnerabilities.
Report privately through GitHub's private vulnerability reporting (the "Report a vulnerability" button under the repository's Security tab).
If you cannot use that channel, email team@warmbly.com.
Please include:
- A description of the vulnerability and its impact.
- Steps to reproduce, or a proof of concept.
- Affected version(s) and environment details.
- We aim to acknowledge your report within 2 business days.
- We will keep you informed as we investigate and work on a fix.
- We follow a coordinated disclosure process and will credit reporters who wish to be acknowledged once a fix is released.
Thank you for helping keep warmbly-py and its users safe.