brolly is pre-1.0; only the latest release on PyPI receives security fixes.

Please report security issues privately — do not open a public issue.

• Preferred: GitHub's private vulnerability reporting (the repo's Security tab → Report a vulnerability).
• Or email contact@fullduplex.media with details and steps to reproduce.

We aim to acknowledge reports within a few business days. Please give us a reasonable window to ship a fix before any public disclosure.