Do not open a public issue for a suspected security vulnerability.

Instead, report it privately to:

• ibitato@gmail.com

Please include:

• a clear description of the issue
• affected versions or commits if known
• reproduction steps or proof of concept
• impact assessment if available

This is a small maintained project, so response times are best-effort rather than guaranteed.

The goal is to:

• acknowledge the report
• verify the issue
• fix or mitigate it
• disclose the resolution appropriately