Please report security issues privately to the maintainers before public disclosure.

Do not include credentials, npm tokens, GitHub tokens, private keys, or secret values in issues, pull requests, commits, or test fixtures.