If you discover a security vulnerability in this repository, please report it privately rather than opening a public issue.

• Preferred: use GitHub's private vulnerability reporting for this repository (the "Security" tab → "Report a vulnerability"), which opens a private advisory visible only to maintainers.
• If that is unavailable, open a regular issue with minimal detail asking a maintainer to open a private channel, and avoid posting exploit details publicly until a fix is available.

We aim to acknowledge reports promptly and will coordinate on a disclosure timeline once a report is triaged.

This project does not currently maintain multiple release branches with distinct security-support windows. Security fixes are made against the default branch.