Please report vulnerabilities privately — do not open a public issue.

• Preferred: open a private report through GitHub Security Advisories (the "Report a vulnerability" button under the repository's Security tab)
• Alternatively, email security@evey.cc

Include details about the vulnerability and clear steps to reproduce. We aim to acknowledge reports promptly and keep you updated on the fix.

Only the latest release is actively supported for security updates.