The default branch is the supported version for security fixes.
Please do not publish secrets or exploit details in a public issue. Use GitHub's private security advisory flow for this repository, or contact the maintainers through the private contact method listed in the repository profile.
Include a clear description, reproduction steps using mock data, impact, and a suggested mitigation. Do not send passwords, cookies, API keys, tokens, or exported browser profiles.
- Never commit raw credentials or session material.
- Treat browser profile directories as sensitive data.
- Validate imports before queueing work.
- Require explicit authorization for any live integration.
- Keep logs free of secrets and personal data.