Until a v1.0 release ships, only the latest commit on main is supported.

Please report security issues privately. Open a GitHub Security Advisory (Security tab → Report a vulnerability) rather than a public issue.

We will acknowledge reports within 7 days and aim to ship a fix within 30 days for high-severity findings.