Please report suspected vulnerabilities privately through this repository's Security tab by selecting Report a vulnerability. Include affected paths or versions, reproduction steps, impact, and any suggested mitigation.

Do not open a public issue for an undisclosed vulnerability and do not include secrets, access tokens, personal data, or production evidence in a report.

The maintainers will acknowledge the report through the private advisory, validate its impact, coordinate a correction, and publish disclosure information when it is safe to do so.

Before the first release, only the latest commit on main is maintained. After releases begin, supported versions will be listed here explicitly.