Please report security issues privately to the maintainer via GitHub Security Advisories or direct contact.
Include:
- affected component
- reproduction steps
- impact assessment
- remediation suggestion (if available)
- file system automation actions (copy/move/rename/delete)
- webhook delivery and outbound integrations
- API authentication/session controls
- deployment configuration and secrets handling
Please avoid public disclosure until a patch is available.