If you discover a security vulnerability, please report it responsibly.

Do not open a public issue. Instead, email the maintainer directly or use GitHub's private vulnerability reporting.

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact

You can expect an initial response within 48 hours.

Only the latest version on the main branch receives security updates.