# Security Policy

## Supported Versions

| Version | Supported | Post-EOL / Enterprise                 |
|---------|-----------|---------------------------------------|
| 1.1.x   | ✅         | [Tidelift Subscription][tidelift-ref] |
| 1.0.x   | ✅         | [Tidelift Subscription][tidelift-ref] |
| 0.6.x   | 🚨        | [Tidelift Subscription][tidelift-ref] |
| 0.5.x   | 🚨        | [Tidelift Subscription][tidelift-ref] |
| <= 0.5  | ⛔         | ⛔                                     |

LEGEND:
✅ - Supported
🚨 - Will only receive critical bug and security updates.
⛔ - No Support

### EOL Policy

Non-commercial support for the oldest version of Ruby (which itself is going EOL) may be dropped each year in April.

## Security contact information

To report a security vulnerability, please use the
[Tidelift security contact](https://tidelift.com/security).
Tidelift will coordinate the fix and disclosure.

## OAuth for Enterprise

Available as part of the Tidelift Subscription.

The maintainers of oauth and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source packages you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact packages you use. [Learn more.][tidelift-ref]

[tidelift-ref]: https://tidelift.com/subscription/pkg/rubygems-oauth?utm_source=rubygems-oauth&utm_medium=referral&utm_campaign=enterprise&utm_term=repo

## Additional Support

If you are interested in support for versions older than the latest release,
please consider sponsoring the project / maintainer @ https://liberapay.com/pboling/donate,
or find other sponsorship links in the [README].

[README]: README.md
