This is an experimental project. Fixes target the latest main branch; there is no support or response-time guarantee.

Report vulnerabilities privately using GitHub private vulnerability reporting. Include affected revision, reproduction steps and impact. Do not post credentials or exploitable details in public issues. If private reporting is unavailable, do not post the details publicly.

Use local or trusted environments. Review the README security boundaries before deployment.