Please report security vulnerabilities privately by opening a GitHub security advisory or contacting the maintainers through the repository's preferred private security channel.

Do not include API keys, personal data, screenshots of sensitive screens, or exploit details in public issues.

1. The maintainers acknowledge the report.
2. The issue is reproduced and assessed.
3. A fix is prepared and reviewed.
4. A release or patch guidance is published.
5. Credit is given when requested and appropriate.

Security fixes target the latest version on the default branch unless the project documents maintained release branches.