If you discover a security vulnerability in AutoPiP, please report it responsibly:

1. Do not open a public issue
2. Use GitHub private vulnerability reporting
3. Include a description of the vulnerability and steps to reproduce

You can expect an initial response within 48 hours. Confirmed vulnerabilities will be patched as soon as possible and credited in the release notes (unless you prefer to remain anonymous).