Security policy Never commit real API keys. Report vulnerabilities privately via the repository's security advisories. Supported: the latest minor release.