enviable

# Enviable Security

## LLM-Generated Security Report Policy

Absolutely no security reports will be accepted that have been generated
solely by LLM agents. There must be a human that confirms the issue.

## Supported Versions

Security reports are accepted for the most recent major release with support
for the previous major version ending immediately.

Enviable supports the three most recent versions of Elixir and supported
[Erlang/OTP versions][otp-versions].

As of July 2026, the support list is:

| Elixir | Erlang         | Deprecation   |
| ------ | -------------- | ------------- |
| 1.17   | 25, 26, 27     | November 2026 |
| 1.18   | 25, 26, 27, 28 |               |
| 1.19   | 26, 27, 28     |               |
| 1.20   | 27, 28, 29     |               |

The oldest supported version of Elixir will not be deprecated until six months
after the release of a new version of Elixir.

## Reporting a Vulnerability

Create a [private vulnerability report][advisory] with GitHub.

[advisory]: https://github.com/halostatue/enviable/security/advisories/new
[otp-versions]: https://hexdocs.pm/elixir/compatibility-and-deprecations.html#between-elixir-and-erlang-otp