Please do not open a public issue for security vulnerabilities, leaked credentials, or other sensitive reports.

Use GitHub Private Vulnerability Reporting for this repository when available. Include:

• A clear description of the issue.
• Steps to reproduce or verify it.
• The affected files, pages, scripts, or workflows.
• Any impact you believe the issue may have.

If you accidentally commit a real secret, revoke or rotate it immediately before opening a report.

This project is distributed as source code. Security fixes apply to the current main branch unless maintainers state otherwise.