Security Policy Do not disclose vulnerabilities publicly. Use GitHub private vulnerability reporting.