简体中文 · English

If you discover a reproducible security issue, do not publish sensitive inputs, credentials, or directly exploitable details in a public issue.

If GitHub Private Vulnerability Reporting is enabled for this repository, use Report a vulnerability on the Security tab. Otherwise, contact the repository maintainers first to arrange a private reporting channel. No dedicated email address, response-time commitment, or supported-version policy is currently declared.

Include the affected commit or version, platform, reproduction steps, actual impact, and the minimum input needed to reproduce the issue. Use the bug issue template for ordinary functional defects. Before a public release, maintainers should configure a private reporting channel and define the supported scope.