Please report suspected vulnerabilities privately through GitHub Security Advisories. Do not open a public issue for an unpatched vulnerability.
The currently supported release line is 0.0.x. Security fixes are published as a new NuGet version through the tag-driven GitHub Actions release workflow.
For the library's path, content-trust, approval, and resource-limit model, see docs/Security.md.