# Security Policy

Please do not report security issues through public GitHub issues.

If GitHub private vulnerability reporting is enabled for this repository, use
that channel. Otherwise, contact the maintainers directly through a private
channel before publishing details.

When reporting an issue, include:

- affected version or commit
- impact
- reproduction steps
- any proposed mitigation
