As kaiwa is currently in its initial alpha phase, only the most recent development builds are supported with security updates. We recommend always staying on the latest tag for the best security coverage.

We take the security of our users and their AniList data seriously. If you discover a security vulnerability within this project, please follow the steps below to report it responsibly:

1. Do Not Open a Public Issue: Please refrain from reporting security vulnerabilities via public GitHub issues to prevent exploitation before a fix is ready.
2. Contact: Reach out directly by opening a private security advisory on this repository or contact the maintainer via the email associated with the monsurcodes GitHub profile.
3. Details to Include:
   • A description of the vulnerability.
   • Steps to reproduce the issue.
   • Potential impact of the vulnerability.

• Acknowledgment: You can expect an initial acknowledgment of your report within 48–72 hours.
• Updates: We will provide weekly updates on the status of the fix until the vulnerability is resolved.
• Public Disclosure: Once a fix is verified and released in a new build, we will coordinate a public disclosure and credit you for the discovery (unless you prefer to remain anonymous).

Thank you for helping keep the kaiwa community safe.