Only the current main branch and the latest tagged plugin release are supported.

Use GitHub's private vulnerability reporting for checksum bypasses, malicious release selection, archive handling problems, or other security issues. Do not open a public issue.

Include the affected plugin commit, mise version, reproduction steps, and any known impact. Maintainers will coordinate remediation and disclosure with the reporter.