Security fixes are handled on the default branch.

Please do not open a public issue for sensitive security reports.

Report vulnerabilities through GitHub Security Advisories if available, or contact the maintainer privately through the GitHub profile linked from this repository.

Include:

• A clear description of the issue
• Steps to reproduce
• Expected and actual impact
• Affected browser, runtime, or deployment environment
• Any relevant screenshots, logs, or proof-of-concept details that do not expose private user data

Do not include real resumes, API keys, access tokens, private documents, or credentials in issues, pull requests, screenshots, or logs.