This project is under active development. Security fixes are applied to the latest main branch state.

Please do not open public issues for vulnerabilities.

Preferred process:

1. Send a private report with clear reproduction steps.
2. Include affected files/modules and severity estimate.
3. Include proof-of-concept only if required to reproduce.

Suggested report fields:

• Vulnerability type
• Impact
• Attack preconditions
• Reproduction steps
• Affected commit/version (if known)
• Suggested mitigation

• We will acknowledge receipt.
• We will triage and reproduce.
• We will coordinate disclosure timing when a fix is ready.