This project is currently maintained on the default branch.

Please do not open public issues for security vulnerabilities.

Instead, report vulnerabilities privately by contacting the maintainer and including:

• A clear description of the issue
• Steps to reproduce
• Potential impact
• Suggested mitigation (if available)

You can expect an initial response within 7 days.

• We will acknowledge receipt of the report
• We will validate and triage the issue
• We will work on a fix and coordinate disclosure timing
• We will publish a patch note once a fix is available