This project is currently in alpha. Security fixes are only guaranteed for the latest state of the main branch.

Please do not report security issues in public GitHub issues.

Instead, report privately by using one of the following:

• GitHub Security Advisories (preferred, if enabled for this repository)
• Direct maintainer contact

Include as much detail as possible:

• Affected commit/version
• Reproduction steps
• Potential impact
• Any proof-of-concept details needed to verify the issue

• Initial acknowledgment target: within 72 hours
• Follow-up status updates: best effort, at least weekly until resolution or mitigation guidance is available

Please allow time for verification and remediation before public disclosure. We follow coordinated disclosure where possible.