Security fixes target the latest version on main and the latest published package version.

Please use GitHub's private Report a vulnerability feature when available. If it is unavailable, contact the repository maintainers privately through the contact address on the 4onStudios website.

Do not open a public issue for an unpatched vulnerability. Include the affected version, impact, reproduction steps, and a suggested mitigation when possible.

Please allow maintainers reasonable time to investigate and release a fix before public disclosure.