Please report security issues privately by emailing b@bnomei.com.

Include the package version, affected entrypoint, a short impact summary, and reproduction steps if you can share them safely.

Please do not open public GitHub issues for suspected vulnerabilities.