如发现本项目的安全问题时，请勿公开发布 Issue。请私下向维护者报告，以便在公开前处理。

If you discover a security issue in this project, please do not open a public issue. Instead, report it privately to the maintainers so it can be addressed before disclosure.

联系方式 / Contact：通过 GitHub 的 Security → Report a vulnerability 创建私有咨询，或发送邮件至维护者（邮箱将另行提供）。

Open a private advisory via GitHub → Security → Report a vulnerability, or email the maintainers (address to be provided).

• 漏洞描述及其影响 / Description of the vulnerability and its impact
• 复现步骤 / Steps to reproduce
• 受影响的文件或数据条目 / Affected files or data entries
• 建议的修复方案（可选）/ Suggested fix (optional)

• 我们将在 7 天内确认收到报告 / We will acknowledge your report within 7 days.
• 我们将同步修复进展，并与您协调公开时间 / We will keep you updated on the fix progress and coordinate the disclosure timeline with you.

本策略涵盖本仓库中的代码。请注意：本项目存储的是数据而非可执行逻辑；大多数「安全」报告通常涉及数据完整性或脚本安全，而非运行时漏洞。

This policy covers the code in this repository. Note that this project stores data, not executable logic; most "security" reports will relate to data integrity or script safety rather than runtime exploits.

可用中文或英文提交报告。

Reports may be submitted in English or Chinese.