Please report security issues privately — do not open a public issue.
- Preferred: open a private report via GitHub's Security Advisories.
- Alternatively, email studio@vichitracollective.com with details and, if possible, steps to reproduce.
You can expect an initial response within a reasonable timeframe. Once a fix is available, the advisory will be published and credit given to the reporter unless anonymity is requested.
This project is in early development. Security fixes are applied to the latest
main; there are no long-term support branches yet. This section will be
updated once tagged releases exist.