Please report security vulnerabilities privately via GitHub Security Advisories, or by email to jghoman@gmail.com.

Please do not open a public issue for security-sensitive reports.

You can expect an initial response within 7 days. If the issue is confirmed, a fix will be released as soon as possible, with credit to the reporter unless anonymity is requested.

Only the latest release on main receives security fixes.