Please report security issues privately by emailing:
Include:
- Affected version/commit
- Reproduction steps or proof of concept
- Impact assessment (if known)
We will acknowledge receipt and coordinate remediation and disclosure timing.
Until v1.0.0 is released, security fixes are provided on a best-effort basis for the latest main branch.