Security Policy Reporting a Vulnerability Please open a GitHub Security Advisory with reproduction steps. We respond within 72 hours. Secure Defaults Branch protection and PR review Automated dependency updates Code scanning in CI