Security fixes are applied to the latest released version. Until v1.0.0 is tagged, the main branch is the supported development version.

Please use GitHub's private vulnerability reporting feature for this repository. Do not open a public issue for a vulnerability that could expose tokens, personal data, or operator systems.

Include the affected version, operating system, reproduction steps, impact, and any suggested remediation. We will acknowledge a valid report within seven days and coordinate disclosure after a fix is available.

Never attach real GitHub tokens, private repository content, or harvested personal information to an issue. Replace them with synthetic fixtures under reserved domains such as example.com.