Report suspected vulnerabilities privately through the affected repository's
Security → Report a vulnerability page or email contact@tertius.cc.
Include the affected revision, a minimal reproduction, and the possible impact.
Do not include real credentials, private research data, or third-party material you cannot redistribute. Maintainers will coordinate investigation and any necessary disclosure.
Use GitHub issues for ordinary bugs and questions. A repository's own
SECURITY.md takes precedence over this default policy.