- Report vulnerabilities privately to @ssotoa70.
- Do not include sensitive data in issues or PRs.
- Run
npm auditbefore releases; document critical/high items with remediation. - Checksums are optional; enable
--checksumwhen validating integrity on shared storage.