If you discover a security vulnerability in this project, please report it responsibly.

1. Do not open a public issue.
2. Email security concerns to the maintainers or use GitHub's private vulnerability reporting.
3. Include as much detail as possible:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgment within 48 hours.
• Status update within 7 days with an initial assessment.
• Resolution timeline communicated once the issue is confirmed.

• We will work with you to understand and address the issue.
• Once a fix is available, we will publish a security advisory.
• Credit will be given to reporters (unless anonymity is preferred).

• Always use the latest version of this package.
• Keep your dependencies up to date.
• Report any suspicious behavior immediately.