Please do not report security issues in public issues, discussions or pull requests.

Report them privately through GitHub: open the repository's Security tab and choose Report a vulnerability (private vulnerability reporting). The report reaches the maintainers only.

Include the affected component or file, the release (ui-<12 hex>) or source revision, how to reproduce it and what an attacker could do with it. Please give us a reasonable time to release a fix before you disclose the issue.

This repository is the source of the SIMAI Framework runtime published in simai/ui. Issues in the build system belong to simai/ui-builder; issues in bundled third-party code (see THIRD_PARTY_NOTICES.md) belong to their upstream projects.