This policy covers both zaxis and z-emoji. Security fixes target the latest published version of each crate. The initial release is 0.0.4 Motion; older development versions do not receive separate backports.

Report ordinary bugs and non-sensitive security concerns through GitHub Issues.

For vulnerabilities whose details could expose users, contact @nihmadev on Telegram privately before opening a public issue. Include the affected version, platform, reproduction steps, and expected impact. Do not include credentials or private user data in public reports.

After assessment, disclosure and fixes can be tracked in a public issue. There is no guaranteed response deadline during development.