This policy applies to the DotNetAgents public plugin package surface.

Do not disclose suspected vulnerabilities through public issues. Until the public coordinated-disclosure contact is published, report findings through the maintainer contact channel used for the release candidate. The public mirror must not be enabled until this section carries a public security contact.