Use GitHub private vulnerability reporting. Include the affected release, minimal synthetic reproduction, expected boundary, and actual result. Do not post credentials, conversations, or unpatched exploit details in public issues.

Use the latest 0.1 patch. This early package has not had an independent security audit. Applications remain responsible for authentication, request limits, safe output, and the selected provider's processing policy.