Only the latest release on main is supported.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability-reporting form for this repository. Include the affected release, reproduction steps, impact, and any suggested mitigation.

The acknowledgement target is three business days. Resolution timing depends on severity and the safety of the required database rollout.

Never include production credentials, player data, audit records, database dumps, or screenshots containing secrets in a report.