Security fixes target the latest release on the main branch.

Use GitHub's private vulnerability reporting for this repository. Include reproduction steps, affected versions, and the expected impact. Please do not disclose the issue publicly before a fix is available.

This library performs local calculations only. Applications remain responsible for authorization, persistence, input limits, and protection of learner data.