Please do not open a public issue for security problems.

Email the maintainer directly, or report privately via GitHub Security Advisories if available. You should receive an acknowledgment within 72 hours.

Include:

• the version affected,
• a minimal reproduction,
• the impact, if you have assessed it.

data/ is meant to hold local configuration only and should never be committed to version control with real credentials.