Please report security vulnerabilities privately. Do not open a public issue for security concerns.

Use either channel:

• GitHub private vulnerability reporting (preferred) — open a private report from the repository's Security tab → Report a vulnerability. This keeps the report and the fix coordination private until a patch ships.
• Email — casey@geeknest.com.

Please include a description of the issue, the version or commit affected, and steps to reproduce. We aim to acknowledge reports within 5 business days.