If you discover a security issue, please avoid filing a public issue.

Instead, contact the maintainer privately and include:

• a clear description of the issue and impact
• minimal reproduction steps
• affected versions/commits if known