We take security seriously and do our best to keep our code secure. However, if you have found or think you may have found a security vulnerability, you should open a security advisory here or contact us at [email protected].

Examples of things you should not do:

• open a normal issue
• disclose sensitive information publicly
• use, distribute or disclose information exploited from a security vulnerability
• do any harm to systems or persons impacted by the security vulnerability
• ...