If you discover a security vulnerability in this repository or related project infrastructure, please report it privately by emailing tom@musicthing.co.uk.

Please do not open a public GitHub issue for security reports.

Include as much detail as you can so the issue can be reproduced and assessed, for example:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof of concept
• Affected components, versions, or URLs, if known

We will acknowledge receipt when possible and work to address valid reports. Thank you for helping keep the project and its users safe.