Please do not open a public issue for a security problem.
Use GitHub's private vulnerability reporting on this repository ("Security" tab -> "Report a vulnerability"), or email streamline@vectorstreamsystems.com.
Please include what you did, what happened, and what you expected. A proof of concept helps but is not required.
This is a small project, so response times depend on availability rather than a staffed rota — but reports are taken seriously and you will get an acknowledgement. If you have not heard back within a week, please chase it; the message was probably missed rather than ignored.
Development happens on main, and fixes land there first. There is not yet a
long-term support branch.