The Zane project takes security seriously and appreciates responsible disclosure of vulnerabilities.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, use GitHub's private vulnerability reporting:

1. Go to the affected repository under github.com/zane-lang.
2. Open the Security tab.
3. Click Report a vulnerability to open a private advisory.

If private reporting is not enabled on a particular repository, open an issue asking a maintainer to contact you — without disclosing the details of the vulnerability — and we will arrange a private channel.

To help us triage quickly, please include as much of the following as you can:

• The repository and version, commit, or release affected.
• A description of the vulnerability and its impact.
• Step‑by‑step instructions to reproduce it, ideally with a minimal example.
• Any suggested mitigation or fix, if you have one.

• We aim to acknowledge new reports within a few days.
• We will keep you informed as we investigate and work on a fix.
• Once a fix is available, we will coordinate disclosure and credit you for the report, unless you prefer to remain anonymous.

Thank you for helping keep Zane and its users safe.