To report a security vulnerability, you can either:

• Open a GitHub Security Advisory (preferred)
• Email spencer@savvyweb.systems

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

We will acknowledge receipt within 72 hours and provide updates as we investigate. We appreciate responsible disclosure and will credit reporters in release notes unless anonymity is requested.