Please report suspected vulnerabilities privately through GitHub's security advisory feature for yehweihsu/irez. Do not open a public issue containing an exploit, sensitive artifact, or provenance data.

Only the latest released version receives security fixes during the current pre-1.0 phase. Release assets include SHA-256 checksums and SPDX SBOMs; eligible repositories also publish GitHub artifact provenance.