Report vulnerabilities privately through GitHub Security Advisories on this repository ("Report a vulnerability"). Please do not open public issues for security problems. We aim to acknowledge reports within 3 working days.

Every published version carries npm provenance from codai-ro/platform-kit release.yml; a version without provenance is not ours.