Please do not report suspected security vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting feature for the Sprouted Code repository. If that is unavailable, contact Daniel Robbins at drobbins@kernel-seeds.org.

Include the affected Sprouted Code release, platform and architecture, reproduction details, and whether the issue appears to originate in the upstream Visual Studio Code source, an included patch, or the build and packaging process.

Security issues inherited unchanged from the upstream source should also follow Microsoft's published Visual Studio Code security reporting process. Please allow time to coordinate an upstream report before public disclosure.