If you believe you have found a security issue, please do not open a public issue. Instead use GitHub Security Advisories or email maintainers@saworbit.com. Provide the steps to reproduce, impact assessment, and a proof of concept if available.

1. Acknowledge within 48 hours.
2. Investigate and coordinate a fix on main.
3. Release and communicate the patch, then inform the reporter.