The actively maintained branch is:

• master

Unless explicitly stated, historical branches are not guaranteed to receive security fixes.

Do not disclose vulnerabilities in public issues.

Please report privately through one of the following channels:

1. GitHub Security Advisory (recommended)
2. Direct private contact with maintainers

Please include:

• affected scope
• reproduction steps
• potential exploit conditions
• suggested mitigation (optional)

We will acknowledge and triage reports as soon as possible.