Please do not open a public issue for security problems.

Instead, report privately via GitHub's Security Advisories (Security tab → "Report a vulnerability").

Include steps to reproduce and the affected version/commit. You'll get a response as soon as possible.

This is a small project; only the latest main is supported. Fixes land on main and are not backported.