Report suspected vulnerabilities through GitHub's private vulnerability reporting for the hraness/ui repository. If GitHub reporting is unavailable, email hraness@pm.me. Do not include sensitive details in a public issue.

Security fixes target the latest version tag. Maintainers will coordinate disclosure and publish a new immutable tag when a fix is ready.

Accessibility regressions are usually appropriate for a public issue unless reporting them would disclose a security or privacy problem.