Please report security vulnerabilities by emailing david@dmora.com instead of opening a public issue.

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact

You should receive a response within 48 hours. We will coordinate disclosure timing with you.