Security fixes are handled on the latest code in the Main branch and the latest production-ready build from that branch.

• Do not open a public GitHub issue for undisclosed security problems.
• Use GitHub's private vulnerability reporting flow if it is enabled for this repository.
• If private reporting is unavailable, contact the maintainer through the GitHub profile linked to this repository and include the affected area, reproduction steps, impact, and any suggested mitigation.

Please report vulnerabilities related to the application runtime, build tooling, or bundled dependencies that ship with this repository.