To report a security vulnerability, please email the maintainers directly. Do not file a public issue.

We will acknowledge receipt within 48 hours and provide a timeline for resolution.

Only the latest release on the main branch receives security patches.