SM Engine is actively maintained, and security updates are provided for the latest stable release.

Only the latest stable release is guaranteed to receive security updates.

Security is an important priority for SM Engine.

If you discover a security vulnerability, please report it responsibly.

How to Report:

• Use GitHub's Private Vulnerability Reporting feature through the repository's Security tab, if available.
• Do not disclose security vulnerabilities through public GitHub Issues.
• Provide a clear description of the vulnerability and steps to reproduce it.
• Include relevant logs, screenshots, or proof-of-concept code when possible.

After receiving a vulnerability report:

1. The report will be reviewed and investigated.
2. The reporter will receive an acknowledgment within 7 days.
3. Valid vulnerabilities will be assessed and prioritized.
4. Security fixes will be developed and released when appropriate.
5. The reporter will be informed about the resolution.

Please allow sufficient time for vulnerabilities to be investigated and fixed before making them public.

We appreciate security researchers and community members who help make SM Engine safer and more reliable.

Thank you for helping improve SM Engine.