Security fixes are provided for the latest tagged release. Pre-release versions may change without backward-compatibility guarantees.

Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue containing exploit details, credentials, customer data, or other sensitive information.

Include the affected version, reproduction steps, impact, and any proposed mitigation. Reports will be acknowledged as soon as practical and coordinated disclosure is appreciated.

The package operates on caller-provided data and writes reports only to paths explicitly supplied by the caller. Users remain responsible for access control, data minimization, retention, and review of generated validation evidence.