Do not open a public issue for a security vulnerability. Report it privately to the repository owner through GitHub's private vulnerability reporting, or contact the maintainer through the email listed on the maintainer's GitHub profile.

Include the affected version or commit, operating system, reproduction steps, and the impact. Please allow time for investigation before public disclosure.

This project is early-stage and does not promise a fixed response or patch timeline yet.