Security fixes are applied to the latest published release line.

For sensitive security issues, do not open a public GitHub issue.

Report privately by email:

• hello@cochinescu.com

Include:

• a description of the issue
• reproduction steps or a proof of concept
• the affected package version
• any suggested mitigation

I will acknowledge receipt and follow up with a fix or triage decision as quickly as practical.