Do not report security issues through public issues.

Send a private report to the project maintainers with:

• Affected version or commit.
• Reproduction steps.
• Expected impact.
• Suggested mitigation, if known.

The library must never include raw image bytes or base64 payloads in error messages.