SimpleOTP packages have their versioning system in sync with .NET versions. That means that for each active .NET version there will be a corresponding major version of the packages.

We regularly run security audits and fix any security issues that are found. If you find a security issue, please report it to us as described below.

We support all active .NET versions until the end of their lifecycle. We do not support .NET versions that reached their end of support. That means that at a time there're can be at max three versions of .NET that are being supported (LTS, active, and preview or next LTS).

If you found any vulnerability, please tell us on [email protected]. You'll get all updates on a reported issue, unless you stated it in the message

Please, do not open an issue for an vulnerability, unless you've been told to do so by project maintainers