Security policy

Please report suspected vulnerabilities privately through GitHub Security Advisories. Do not report vulnerabilities in public issues or pull requests.

If GitHub private vulnerability reporting is unavailable, email evangonggyf@gmail.com. Include the affected version or commit, the impact, and steps to reproduce. Do not include real credentials or unrelated private user data.

This project does not promise a response or fix timeframe. Please allow maintainers time to investigate before sharing vulnerability details publicly.