Do not open a public issue for a suspected vulnerability. Report it through GitHub’s private vulnerability reporting for raintree-technology/trellis.

Include the affected version, reproduction steps, impact, and any known workaround.