Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately via GitHub's private vulnerability reporting (Security → Advisories → Report a vulnerability), or by emailing the maintainers at nicklmoignard@gmail.com.

Please include:

• a description of the vulnerability and its impact,
• the steps to reproduce it, and
• the affected version (yamlx --version).

You can expect an initial response within a few days. We will keep you informed as we work on a fix and will credit you in the release notes unless you prefer to remain anonymous.

Security fixes are released against the latest published version. Please upgrade to the most recent release before reporting an issue.