Please do not open a public issue for security vulnerabilities.

Report them privately through GitHub's private vulnerability reporting: on the affected repository, go to the Security tab → Report a vulnerability. This opens a private advisory visible only to you and the maintainers.

We aim to acknowledge reports within a few days and will keep you informed as we investigate and prepare a fix. Once a fix is available, we will coordinate disclosure with you.

This policy applies to all repositories in the fiberpath organization. When reporting, please include the repository, affected version/commit, and steps to reproduce.