If you discover a security issue, please do not open a public issue. Instead, email tim@timlin.dev with details and steps to reproduce.

We will acknowledge receipt within 72 hours and provide a timeline for a fix once the issue is confirmed.