If you believe you’ve found a security issue, please do not open a public issue.

Instead:

• Use GitHub Security Advisories (preferred), or
• Contact the maintainer via the email address on the maintainer’s GitHub profile.

Please include:

• What you found and impact
• Steps to reproduce
• Any relevant logs (redacted — never include tokens)