If you discover a security vulnerability, please report it privately via GitHub Security Advisories.

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if available)

We aim to acknowledge reports within 48 hours and provide regular updates on progress.

• Keep dependencies up to date
• Use environment variables for sensitive configuration
• Follow the principle of least privilege