Evidence: Security reports reach the maintainers through a private GitHub channel, never through a public issue.

Evidence passport

Security reports reach the maintainers through a private GitHub channel, never through a public issue.

Source-linkedReviewed: 2026-09-12