The main branch is the supported branch for security updates.
If you discover a security issue, open a private security advisory on GitHub for this repository.
Please include:
- Impact summary
- Reproduction steps
- Affected files or modules
- Suggested mitigation if available
- Do not publish proof-of-concept exploit details before a fix is available.
- Remove secrets immediately if accidentally committed.
- Rotate impacted credentials before publishing remediation commits.