Do not open a public issue for security problems.

Use GitHub's private vulnerability reporting: Security → Report a vulnerability on this repository. Reports stay private and are visible to maintainers only.

Include steps to reproduce, affected versions, and impact. We respond as soon as we can.

• Anything that exposes secrets, tokens, or player data
• Exploits that affect the 6b6t servers or 6b6t.org
• Vulnerabilities in dependencies this project ships