1  # Security Policy
 2  
 3  ## Supported Versions
 4  
 5  * Versions 1.x (branch Catch1.x) are no longer supported.
 6  * Versions 2.x (branch v2.x) are currently supported.
 7  * `devel` branch serves for stable-ish development and is supported,
 8    but branches `devel-*` are considered short lived and are not supported separately.
 9  
10  
11  ## Reporting a Vulnerability
12  
13  Due to its nature as a _unit_ test framework, Catch2 shouldn't interact
14  with untrusted inputs and there shouldn't be many security vulnerabilities
15  in it.
16  
17  However, if you find one you send email to martin <dot> horenovsky <at>
18  gmail <dot> com. If you want to encrypt the email, my pgp key is
19  `E29C 46F3 B8A7 5028 6079 3B7D ECC9 C20E 314B 2360`.