Please do not report vulnerabilities or exposed credentials in a public issue. Contact the maintainer through the private security contact configured for the deployment, include reproduction steps and impact, and allow a reasonable remediation window before disclosure.

Never attach credentials, access tokens, real user data, or production database exports to an issue or pull request.