Latest main and the most recent release.
Email: [email protected] (placeholder). Include steps to reproduce, impact, and any CVE references.
We prefer responsible disclosure. We’ll acknowledge receipt within 5 business days and keep you updated on status.
No secrets should ever be committed. Public repos have GitHub’s secret scanning; we also run lightweight checks in CI.