Older versions: Security reports about pre-release development (before 0.1.0) target the current main branch.

Report vulnerabilities privately through GitHub Security Advisories. Do not open a public issue for an unpatched vulnerability.

Include the affected commit or version, the impact, and clear reproduction steps. The maintainers will acknowledge and coordinate reports as promptly as possible; please allow time to investigate and prepare a fix before public disclosure.