See docs/SECURITY.md for supported versions, security features, and best practices.

To report a vulnerability: use GitHub Security Advisories (repo Security tab → Report a vulnerability). Do not open a public issue.