IO CLI is pre-release. Only the latest main and develop receive security fixes until a stable 1.0.0 is published.

Do not open a public issue for security problems.

Report it privately through GitHub: Security → Report a vulnerability. The report is visible only to you and the maintainers, and GitHub notifies us directly — there is no address to look up and nothing to publish.

Include:

• A description of the issue and its impact
• Steps to reproduce or a proof of concept
• Affected version, commit, or branch

You will get an acknowledgement, and we will work with you on a fix and coordinated disclosure. Please give us reasonable time to release a fix before any public disclosure.

This policy covers the code in this repository. Vulnerabilities in dependencies should be reported upstream; tell us too if this project is affected.