Security reports reach the maintainers through a private GitHub channel, never through a public issue.◈Source-linkedReviewed: 2026-09-12Public sourcesGitHub private vulnerability reportingSecurity reporting routeView in context →
