If you discover a security vulnerability, please do not open a public issue.

Report it privately via GitHub Security Advisories. We will respond within 5 business days.