This repository contains organization-wide community files and has no versioned releases. Only its current main branch is maintained.

Package repositories inherit this policy unless they publish a narrower policy. Until then, the latest published package version and the current main branch are maintained.

Use GitHub private vulnerability reporting in the affected repository. Organization-wide reports may be submitted privately through this repository. Do not open a public issue containing exploit details, credentials, tokens, personal data, or provider responses.

Include the affected package and version or commit, impact, reproduction conditions, and any suggested mitigation. Reports will be acknowledged and triaged before public disclosure.