The latest released version of this package receives security fixes. Please make sure you are on the most recent release before reporting an issue.

Please report security vulnerabilities privately — not in a public issue or pull request.

Use GitHub's private vulnerability reporting: open the Security tab of this repository and click Report a vulnerability. This opens a private security advisory visible only to the maintainers.

Please include enough detail to reproduce the issue: the affected version, your environment, and a minimal proof of concept if possible. You can expect an initial response within a reasonable time, and we will keep you informed as the report is investigated and resolved.

Thank you for helping keep the project and its users safe.