Please report security issues privately by emailing hi@codepawl.dev.

Include as much detail as possible, including:

• A short summary of the issue
• Affected version(s)
• Steps to reproduce
• Any proof-of-concept or logs

We aim to acknowledge reports promptly and coordinate disclosure on a case-by-case basis. Please allow up to 90 days for coordinated disclosure before public publication unless we agree otherwise.

You can also create a private security advisory on GitHub:

https://github.com/codepawl/featcat/security/advisories/new