This is a small project; security fixes are applied to the main branch.
Please do not open public issues for security vulnerabilities.
Instead, report privately via:
Include as much detail as possible (impact, reproduction steps, affected files, suggested fixes).