Please do not open a public issue for security vulnerabilities.

Use GitHub's private vulnerability reporting: Security → Report a vulnerability on this repository. Include:

• a description of the issue and its impact,
• steps to reproduce (a minimal proof of concept if possible),
• affected version / commit.

We aim to acknowledge reports within a few business days and to provide a remediation timeline after triage.

This project is pre-1.0; only the latest main is supported. Pin a commit/tag for production use.