# Security policy

Please do not report security vulnerabilities in public issues. Use GitHub's
private vulnerability reporting for this repository, or contact the maintainer
privately through the repository owner profile. Include a minimal reproduction,
affected version, impact, and any suggested mitigation. Do not include live
credentials or personal data.

We will acknowledge reports, assess severity, and coordinate a fix before
public disclosure where practical. Reports may target the current candidate package. Released-version support follows
the latest published stable release line.