Do not open a public GitHub issue for security vulnerabilities.

Please report vulnerabilities by emailing the maintainer directly (see the email in the most recent commit). Include:

• A description of the vulnerability and its potential impact
• Steps to reproduce or proof-of-concept code
• Any suggested mitigations

You will receive a response within 72 hours. If the issue is confirmed, a patch will be released as soon as possible (typically within 7 days for critical issues).

This policy covers the argus npm package and its dependencies as used by the package. Third-party dependencies are out of scope — please report those to their respective maintainers.