Security disclosures for the workspace.json specification and related tooling will be handled here.

Please do not open public issues for security-sensitive reports.

Replace this placeholder with the published security contact and disclosure process.