This repository may be a personal project, old experiment, research note, or rough prototype. Security reports are still welcome, but keep public reports clean.

Do not post real secrets, tokens, cookies, private logs, account data, device identifiers, or copy-paste exploit material in a public issue.

For sensitive findings, open a minimal public issue with redacted impact and reproduction context, or use GitHub private vulnerability reporting if it is available for this repository.

Useful reports include the affected commit, environment, expected behavior, actual behavior, and a minimal reproduction using fake data.