Security fixes are only made for the latest released version of Melos.
Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.
Instead, report them privately through GitHub's private vulnerability reporting. You can also find the "Report a vulnerability" button under the Security tab of this repository.
Please include as much of the following as you can:
- A description of the vulnerability and its impact.
- The affected version(s) of Melos.
- Steps to reproduce, or a proof of concept.
- A suggested fix, if you have one.
We will acknowledge your report, keep you updated on our progress, and credit you in the published advisory unless you prefer to remain anonymous.