Please report security issues privately.

• Do not open a public issue.
• Email security concerns to bniladridas@icloud.com.
• Include the affected version, a description of the issue, and steps to reproduce.
• We will acknowledge your report within 3 business days and aim to provide an update within 10 business days.

• Never commit secrets, tokens, or credentials.
• Credentials are stored in the operating system's secure credential store when available, with a file-based fallback only if necessary.
• Keep dependencies up to date.
• Report security issues privately rather than through public issues or pull requests.