The main branch is the supported branch while the project is in its bootstrap phase.

Please do not open a public issue for suspected security problems.

Use GitHub private vulnerability reporting or a private security advisory when available. If that path is unavailable, contact the maintainers through GitHub with:

• a clear description of the issue
• affected files, flows, or branches
• reproduction steps or a proof of concept
• impact assessment
• suggested mitigation if you have one

Reports will be reviewed privately, triaged, and coordinated with a fix before public disclosure whenever possible.