# Security Policy

Please report suspected vulnerabilities privately instead of opening a public
issue. Use GitHub's private vulnerability reporting flow for this repository:

1. Open the repository's **Security** tab.
2. Choose **Report a vulnerability**.
3. Include affected versions, reproduction steps, impact, and any suggested
   remediation.

Maintainers will acknowledge a report, investigate it, and coordinate a fix and
disclosure timeline with the reporter when the issue is confirmed.

Do not include credentials, private keys, customer data, or exploit details in
public issues or pull requests.