Only the latest default branch is actively supported with security fixes.

Please do not open public issues for security vulnerabilities.

Report privately via GitHub Security Advisories or email security@jaw.dev.

Include:

• A clear description of the issue.
• Steps to reproduce.
• Potential impact.

We will acknowledge reports and provide updates as we investigate.