Security policy

Report vulnerabilities privately through GitHub's private vulnerability reporting: open this repository's Security tab and choose Report a vulnerability. Do not report them in issues or anywhere public. That covers the build scripts, the CI workflows and the website.

Reports about the current main branch are welcome. Responses are best effort while the project is maintained by one person.