| You want to | Go to |
|---|---|
| Report a bug or unexpected behaviour | Issues |
| Suggest a feature, new annotation, new endpoint | Issues |
| Ask whether the library is the right fit for your GDPR scenario | Discussions |
| Ask for GDPR regulation interpretation | Discussions. The library does not give legal advice; the maintainer is happy to point you to relevant articles and to publicly available guidance, not to your DPO. |
| Report a vulnerability | Private security advisory. Do NOT open a public issue. See SECURITY.md. |
| Commercial support, integration help, custom adapters | [email protected] |
This is an open-source project maintained by one engineer in Europe. SLAs are best-effort:
- Security advisories: triaged within 5 working days.
- Bugs with a clean reproducer: triaged within 7 days.
- Feature requests: triaged when the maintainer has bandwidth, no fixed window.
- Discussions: best-effort, usually within a week.
If you need a guaranteed response time, that is what [email protected] is for.
- Verify the bug is reproducible against
v1.1.0or later. - Check existing issues for duplicates.
- Read the README and the ADRs.
- Strip secrets from your reproducer.
The project follows Semantic Versioning from v1.0 onward. Breaking changes ship in major bumps and are documented with a migration block in CHANGELOG.md. The 0.x series predates the API freeze; do not assume API stability if you are pinned to a 0.x.
The maintainer will not:
- Audit your GDPR compliance posture for you.
- Speak to your Garante / DPA on your behalf.
- Backport fixes to discontinued versions or to Spring Boot 2.x.
- Build adapters for non-Spring frameworks as a free request.