We actively support the following versions of Slate UI Kit with security updates:
| Version | Supported |
|---|---|
| 3.x | ✅ |
| 2.x | ✅ |
| 1.x | ❌ |
| < 1.0 | ❌ |
We take security vulnerabilities seriously.
Please do not report security vulnerabilities through public GitHub issues.
Send an email to hello@electrik.dev with:
- Type of issue
- Affected files or components
- Branch, tag, or commit reference
- Steps to reproduce
- Proof of concept if available
- Impact assessment
- Initial response within 48 hours
- Status updates while the issue is investigated
- Notification when a fix is available
- We will credit reporters unless anonymity is requested
- Public disclosure happens after a fix is available when possible
When using Slate:
- Keep Slate and Laravel dependencies updated
- Validate and sanitize user input before rendering it in Blade
- Use Laravel CSRF protection in forms
- Serve production apps over HTTPS
- Follow Laravel security recommendations
- Blade escapes output by default; only use unescaped rendering for trusted content
- Interactive components may rely on Alpine.js; keep CSP requirements in mind
- Form components should be paired with server-side validation
Security fixes will be released as patch or minor versions depending on severity and will be documented in CHANGELOG.md.
Thank you for helping keep Slate and its users safe.