Do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities privately via one of these channels:

• GitHub Security Advisories: Report a vulnerability
• Email: miguel@developmi.com - encrypt with PGP if the finding is critical.

Include in your report:

• Description of the vulnerability and its potential impact.
• Steps to reproduce or a proof-of-concept.
• Affected versions.
• Any suggested mitigations.

This project follows coordinated disclosure. We ask that you give us reasonable time to address the vulnerability before public disclosure. We will credit reporters in the release notes unless anonymity is requested.