If you discover a security vulnerability in this project, please report it privately via GitHub Security Advisories.

Do not open a public issue for security vulnerabilities.

You can expect an initial response within 72 hours. If the vulnerability is confirmed, a fix will be prioritised and a patched release published as soon as possible.