Please do not open a public GitHub issue for security vulnerabilities.

Instead, report privately via:

• GitHub Security Advisories: Report here
• Email: avinashvelu03@gmail.com

Include:

1. Description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)

We will respond within 72 hours and aim to release a patch within 7 days of confirmation.

• Always pin to a specific version in production: "mathfuse": "1.0.3"
• Run npm audit regularly in your projects
• Watch this repository for security advisories

We follow coordinated disclosure. Once a fix is released, we will publish a full CVE report.