No stable SDK version has been released. Security fixes currently target the latest commit on the default branch. This table will be updated when the first version is tagged.

Report vulnerabilities privately through GitHub Security Advisories for this repository. Do not open a public issue for a suspected vulnerability and do not include active InPost credentials, access tokens, personal data, or production payloads in a report.

Include the affected revision, impact, minimal reproduction, and suggested mitigation when possible. Sanitized request metadata is acceptable; reusable secrets and personal data are not.

Security reports may cover SDK source, authentication handling, redaction, dependency configuration, generated package archives, and CI workflows. Vulnerabilities in the upstream InPost service should be reported through InPost's official security channel rather than this independent project.