If you discover a security vulnerability in this project, please report it privately rather than opening a public issue.

Email: security@coderooz.com (or open a private security advisory on GitHub)

Please include:

• A clear description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

We will acknowledge receipt within 48 hours and provide a timeline for a fix.

• We follow coordinated disclosure.
• Please give us a reasonable time to fix the issue before disclosing publicly.
• We credit reporters in the release notes (unless you prefer to remain anonymous).

This policy applies to all code in this repository, including dependencies. For known issues, see the GitHub Security Advisories.