This project is pre-1.0. Security fixes are applied to the main branch and the latest published release.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub's private vulnerability reporting.

Please include:

• a description of the issue and its impact,
• steps to reproduce or a proof of concept,
• affected version or commit.

You can expect an initial acknowledgement within a few days. Once a fix is available, a security advisory will be published crediting the reporter unless anonymity is requested.