# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 2.x     | :white_check_mark: |
| < 2.0   | :x:                |

## Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly.

**Please do NOT open a public GitHub issue for security vulnerabilities.**

Instead, please report them via [GitHub's private vulnerability reporting](https://github.com/tamtamchik/app-store-receipt-parser/security/advisories/new).

You should expect an initial response within 72 hours. Once the issue is confirmed, a fix will be released as soon as possible depending on the complexity of the vulnerability.