This project is in pre-release development. Security fixes apply to the latest code on main.

Use GitHub's private vulnerability reporting for this repository. Do not open a public issue for an undisclosed vulnerability.

Include the affected component, impact, reproduction steps, and any proposed mitigation. Do not include credentials, tokens, private keys, or unrelated private data.