Report vulnerabilities privately through this repository's GitHub Security Advisories. Do not put credentials, private keys, customer data, or exploit details in a public issue.

Before the first stable release, only the latest 0.x release is supported. Security-sensitive changes may intentionally reset pre-release configuration and local state.