Please report security vulnerabilities privately by email to rafaelescrich@gmail.com, or through GitHub's private vulnerability reporting ("Security" tab → "Report a vulnerability") on this repository.

Please do not open public issues for security problems. Include a description, affected version/commit, and steps or a proof of concept to reproduce. You should get an acknowledgement within 7 days.

Only the latest release and main receive security fixes.

This project is enrolled in Anthropic's OSS Scanner. The build environment and threat model used by the scanner are in .oss-scanner/.