Please do not open public issues for security vulnerabilities.

Instead, use GitHub Security Advisories for private reporting:

1. Go to the repository page on GitHub.
2. Click the "Security" tab.
3. Click "Report a vulnerability".

If you are unable to use GitHub Security Advisories, do not open a public issue. Instead, email the maintainer using the public contact address listed in this repository's signed commits and request a private reporting channel before sharing any vulnerability details.

RuneCode is currently pre-release. Security fixes will be handled on a best-effort basis.