mnemonist

# Mnemonist Security

## LLM-Generated Security Report Policy

Absolutely no security reports will be accepted that have been generated by LLM
agents.

## Supported Versions

Security reports are accepted for the most recent major release with support for
the previous major version ending immediately.

Mnemonist supports the three most recent versions of Elixir and supported
[Erlang/OTP versions][otp-versions].

As of December 2025, the support list is:

| Elixir | Erlang         |
| ------ | -------------- |
| 1.16   | 24, 25, 26     |
| 1.17   | 25, 26, 27     |
| 1.18   | 25, 26, 27, 28 |
| 1.19   | 26, 27, 28     |

The oldest version of Elixir will not be soft-deprecated until six months after
the release of a new version of Elixir.

## Reporting a Vulnerability

Create a [private vulnerability report][advisory] with GitHub.

[advisory]: https://github.com/halostatue/mnemonist/security/advisories/new
[otp-versions]: https://hexdocs.pm/elixir/compatibility-and-deprecations.html#between-elixir-and-erlang-otp