Please do not report suspected vulnerabilities in a public issue.

If GitHub private vulnerability reporting is available for this repository, use that channel. Otherwise contact LibreCode Coop at contact@librecode.coop and include enough information to reproduce and assess the issue.

For security-sensitive reports, avoid publishing credentials, private keys, installation tokens, customer data or exploit details in public discussions.

The maintainers will coordinate disclosure and remediation according to the severity and impact of the report.