For a sensitive concern, open a brief issue in this repository requesting private contact without exploit details or credentials. Ordinary documentation and validation defects belong in regular issues. There is no supported runtime or response-time commitment; reports should identify the affected library revision.

Inherited private-key detection recognizes some private-key content. It does not establish that repository content or history contains no secrets.