Please report security issues privately rather than opening a public issue.

• Email: security@example.com
• Or use GitHub's private vulnerability reporting on this repository.

I aim to acknowledge reports within 72 hours.

This library has no runtime dependencies and performs no network or filesystem access, which keeps its attack surface small.