Security fixes target the latest published release.

Report vulnerabilities privately through support@twexapi.io or GitHub Security Advisories on this repository.

Do not publish secrets, credential defects, private data exposure, or package supply-chain concerns in an issue.

Expect an acknowledgment within 3 business days. We will set a disclosure timeline after we confirm the issue.

Reports may cover API keys, tool inputs, host permissions, dependencies, bundled output, or release metadata.