# Security Policy
## Reporting a Vulnerability
Please **do not** open a public GitHub issue for security vulnerabilities.
Use GitHub's [Private Vulnerability Reporting](../../security/advisories/new) on this repository to disclose issues responsibly.
## What to Include in Your Report
To help me verify and fix the issue quickly, every report must include:
1. **Clear description** — what the vulnerability is, what causes it, and its security impact.
2. **Line-by-line source references** — the exact file path(s), line numbers, and commit hash or version affected.
3. **Clear reproduction method** — minimal, step-by-step commands or a proof-of-concept that reliably triggers the issue.
Reports missing source references or a reproducible test case may be closed until enough detail is provided.
