Please report suspected vulnerabilities privately to lachkar.salah@outlook.com. Include the affected revision, reproduction steps, and potential impact. Do not include credentials or personal data in public issues.

Security fixes target the current main branch; older snapshots are not maintained as separate release lines. A clean automated scan is not a security guarantee.

Never commit real credentials, private keys, personal records, or production configuration. Use synthetic data for examples. Run the dependency audit and quality checks before proposing a release.