# Security Policy

## Supported Versions

The following versions are supported with security updates:

| Version | Supported          |
| ------- | ------------------ |
| 2.10.0  | :white_check_mark: |
| 2.9.0   | :white_check_mark: |
| 2.8.0   | :x:                |
| 2.7.0   | :x:                |
| <2.7    | :x:                |

As for supported PHP versions, this project only supports the actively supported versions of PHP and versions of PHP
that only receive critical security updates. Currently, that is PHP 8.2, 8.3, 8.4 and 8.5.
Please refer to the [supported versions](https://www.php.net/supported-versions.php) page, to find more details.
When a version of PHP becomes EOL, generally a new release of this project will be issued that sunsets the
support of that retired PHP version.

## Reporting a Vulnerability

If you would like to report a vulnerability or have any security concerns with this project,
please use [GitHub's private vulnerability reporting](https://github.com/azuyalabs/yasumi/security/advisories/new)
to disclose it privately before a fix is available.

To investigate your request as good as possible, please include any of the following when reporting:

- Proof of concept / Code example
- Any tools, including versions used
- Any relevant output

I will take all disclosures very seriously and will do my best to rapidly respond and verify the vulnerability before
taking the necessary steps to fix it. After my initial reply to your disclosure, which should be directly after
receiving it, I will periodically update you with the status of the fix.
