Security Policy Report vulnerabilities privately to security@example.com — do not open a public issue. Supported versions: 1.x.