# Security Policy

## Supported Versions

Security fixes are applied to the latest released version of `tmux-ide`.

## Reporting a Vulnerability

Please do not open a public GitHub issue for security-sensitive reports.

Preferred private reporting path:

1. Use GitHub Security Advisories for this repository:
   `https://github.com/wavyrai/tmux-ide/security/advisories`
2. If advisories are unavailable, use the private contact method listed on the maintainer GitHub profile or npm package profile.

If neither private path is available, do not file a public issue with exploit details. Open a minimal issue asking the maintainer to provide a private contact channel without including sensitive information.

When reporting, include:

- affected version
- operating system and shell
- reproduction steps
- impact assessment
- any proposed mitigation

We will aim to acknowledge reports promptly and work on a fix before public disclosure where possible.