Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them privately via email:

• Email: contact@emu-fake.com
• Subject: [SECURITY] Parcel.NET — <brief description>

Please include:

• A description of the vulnerability
• Steps to reproduce or a proof-of-concept
• The affected package(s) and version(s)
• Any potential impact assessment

• Acknowledgment: Within 48 hours of receiving the report.
• Assessment: Within 7 days we will confirm the vulnerability and communicate next steps.
• Fix: We aim to release a patch within 30 days of confirmation, depending on severity.

We appreciate responsible disclosure and will credit reporters in the release notes (unless you prefer to remain anonymous).