Report privately through GitHub's advisory form. This package drives a local tmux; it opens no network listener of its own.