The repository warns users not to publish exploit details but provides no concrete private reporting path or security policy.
Acceptance criteria:
- Add supported-version and disclosure guidance.
- Point to GitHub private vulnerability reporting if enabled.
- Avoid inventing contact channels that do not exist.
The repository warns users not to publish exploit details but provides no concrete private reporting path or security policy.
Acceptance criteria: