If you discover a security vulnerability, please report it responsibly.
Do not open a public issue. Instead, email the maintainer directly or use GitHub's private vulnerability reporting.
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
You can expect an initial response within 48 hours.
Only the latest version on the main branch receives security updates.