This experimental project has no supported release line. Report vulnerabilities privately through GitHub's Security → Report a vulnerability flow. If private reporting is unavailable, contact a maintainer without including exploit details in a public issue.

Do not commit real credentials while preparing a report. Include affected paths, impact, a minimal reproduction, and suggested remediation. Maintainers should acknowledge reports promptly, rotate exposed credentials immediately, and publish details only after a fix is available.

RPC/API identifiers previously committed to Git history must be treated as exposed even after their removal. Removing a value from the current tree does not revoke it or erase history.