- Please do not open public issues for potential vulnerabilities.
- Report security issues privately via GitHub Security Advisories (if enabled) or by emailing a maintainer.
- We aim to acknowledge within 7 days and provide a timeline for fixes when possible.