I actively maintain and patch security vulnerabilities on the latest release of each active package.

I take the security and integrity of my open-source projects very seriously. If you identify a potential security issue, memory vulnerability, or unsafe execution path, please follow responsible disclosure:

1. Do not open a public GitHub Issue.
2. Send a detailed report directly to: security@omar-afifi.com
3. Please include:
   • Package name and affected version(s).
   • Detailed explanation of the vulnerability.
   • A minimal reproduction sample or Proof of Concept (PoC).
   • Potential impact and attack surface.

• Acknowledgement: Within 24–48 hours.
• Triage & Status Update: Within 5 business days.
• Fix & Public Advisory: Rolled out promptly following patch verification.