This repository is published as-is under the MIT License and is not maintained as a public project.
Security fixes are not accepted through public pull requests, and no security response timeline is promised. If you need a security change on a different timeline or with different tradeoffs, fork the repository and maintain your own patched version.
If GitHub private vulnerability reporting is enabled for this repository, use that channel for sensitive reports. Otherwise, do not disclose sensitive exploit details in a public pull request.