Do not report vulnerabilities in public issues or pull requests. Email aaitor@gmail.com with a summary, affected version/commit, impact, and minimal reproduction. Do not send live credentials or personal data. If the repository's Security tab offers private reporting, you may use that route instead.
This is a community-maintained project with no guaranteed response or remediation time. Security fixes target the latest default branch unless release-specific support is documented. Generated projects should state their own supported versions before publication.