If you discover a security vulnerability, please email security@lapidist.net or use GitHub's private vulnerability reporting feature. Please avoid publicly disclosing the issue until we have released a fix.

Include as much information as possible, such as steps to reproduce and potential impact, to help us triage and address the issue quickly.

• Acknowledgment: We will confirm receipt of your report within 3 business days.
• Initial response: You can expect an initial assessment within 7 business days.
• Resolution: We aim to release a fix or mitigation within 30 days of validation, and will keep you informed of progress throughout the process.

Thank you for helping keep @lapidist/dsr and its users secure.