The project has not reached a tagged 1.0.0 release yet. Until then, security fixes are applied to the main branch only.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub Security Advisories on the repository, under the "Security" tab, using "Report a vulnerability". You can expect an initial response within a few days.

When reporting, include:

• A description of the vulnerability and its impact.
• Steps to reproduce or a proof of concept.
• The affected PHP version and configuration.