This project follows the Contributor Covenant v2.1.
In short: be decent. Assume good faith, critique code rather than people, and accept that maintainer time is finite and unpaid.
Report unacceptable behaviour through GitHub Security Advisories or a direct message to the maintainer. Reports are handled confidentially.