# Security Policy

## Supported Versions

The following versions of fscss are currently receiving security updates:

| Version | Supported          |
| ------- | ------------------ |
| 1.2.x   | :white_check_mark: |
| 1.1.x   | :white_check_mark: |
| < 1.1   | :x:                |

Only the latest two minor releases are actively patched. Older versions
should upgrade to receive fixes.

## Reporting a Vulnerability

If you discover a security vulnerability in fscss, please **do not open a
public GitHub issue**. Instead, report it privately:

- Email: safetyunion5550@gmail.com
- Or use GitHub's [private vulnerability reporting](../../security/advisories/new) for this repo

When reporting, please include:
- A description of the vulnerability and its potential impact
- Steps to reproduce (a minimal repro is very helpful)
- Which version(s) of fscss are affected

**What to expect:**
- Acknowledgement of your report 
- A status update as we investigate (accepted, needs more info, or declined)
- If accepted, a fix will be prioritized and a patched release issued; you'll
  be credited in the release notes unless you prefer to stay anonymous
- If declined, we'll explain why (e.g. not a security issue, expected
  behavior, or already known/fixed)

Please allow a reasonable disclosure window before publicly sharing details,
so users have time to update.