Until the first stable release, security fixes target the latest code on main and the most recent published release candidate.

Please do not open a public issue containing vulnerability details. Use GitHub's private vulnerability reporting for this repository if available, or contact the maintainer privately through the contact method listed on the maintainer's GitHub profile.

Include the affected version or commit, impact, reproduction steps, and any suggested mitigation. Avoid attaching secrets or private workload data. The maintainer will acknowledge the report when possible, coordinate a fix and disclosure, and credit reporters who wish to be named.

For ordinary bugs without security impact, use the public bug-report template.