| Version | Supported |
|---|---|
| 1.x | Yes |
| < 1.0 | No |
If you discover a security vulnerability in Fyper, please report it responsibly:
- Do not open a public GitHub issue
- Email: create a private security advisory on GitHub
- Include steps to reproduce and impact assessment
We will respond within 48 hours and aim to release a fix within 7 days for critical issues.
Fyper's primary security feature is mandatory parameterization: all literal values become $p0, $p1 parameters, never inlined into Cypher strings. This prevents Cypher injection by design.
The parameterization invariant is verified by FsCheck property-based tests.