This project is pre-release and does not yet have a supported production version. Security reports against the current main branch are welcome, but response and remediation are best-effort.

Please do not disclose vulnerability details in a public issue or pull request. Use GitHub's private vulnerability reporting form.

Include the affected commit, a minimal reproducer or configuration, the observed impact, and any known mitigation.