If you discover a security issue, please do not open a public issue first.

Use one of the following channels:

• Open a private security advisory on GitHub (preferred)
• Contact the maintainer directly

Please include:

• Impact and affected components
• Reproduction steps or proof of concept
• Suggested mitigation (if available)

We will acknowledge valid reports as quickly as possible and provide updates during triage.