These repositories are read-only mirrors of libraries extracted from the internal Papercusp monorepo. They are published for reuse and transparency.
Please do not open a public issue for a security vulnerability. Instead, use GitHub's private vulnerability reporting on the affected repository:
- Go to the repository's Security tab.
- Click Report a vulnerability.
- Describe the issue in as much detail as you can (impact, reproduction steps, affected versions).
If private reporting is unavailable for a given repository, open a Security Advisory draft against it, or contact the Papercusp organization owners via GitHub.
We aim to acknowledge reports promptly and will credit reporters (unless you'd prefer to remain anonymous) once a fix has shipped.
This applies to all public repositories under the Papercusp GitHub organization. Secret scanning and push protection are enabled on every public repository in this organization.