Do not open a public issue for security vulnerabilities.

Please report security vulnerabilities by emailing the maintainers directly. You can find contact information in the repository's profile or by opening a private security advisory on GitHub.

We will acknowledge receipt within 48 hours and provide a detailed response within 5 business days.

We follow responsible disclosure. We will:

1. Confirm the vulnerability and determine affected versions
2. Develop and test a fix
3. Release a patched version
4. Publish a security advisory