Crawfish is currently an alpha project. Security fixes will be prioritized for the latest code on main and the latest unreleased work that is expected to merge soon.
There is no backward-compatibility or long-term support guarantee yet.
Do not open a public issue for a suspected vulnerability.
Preferred path:
- Use GitHub private vulnerability reporting or a security advisory if available.
- If that is not available, contact the maintainer privately and include:
- affected commit or branch
- reproduction steps
- impact
- any suggested mitigation
Project maintainer: @Meirtz
- Initial triage target: within a reasonable best-effort window
- Fixes may land on a private branch first and be released publicly afterward
- Public disclosure should wait until the maintainer confirms a fix or mitigation path