Report security issues privately to herherman030303@gmail.com. Do not open a public issue for a vulnerability.

We aim to:

• Acknowledge receipt within 5 business days.
• Provide a fix or mitigation within 30 days for confirmed issues.
• Coordinate public disclosure within 90 days of the initial report.

Only the latest tagged release receives security updates.