Security fixes are applied to the latest published minor version of do-code.

Please do not open a public GitHub issue for a potential vulnerability, exposed credential, sandbox escape, arbitrary file access, or unsafe command execution issue.

Use GitHub's private vulnerability reporting for this repository instead:

https://github.com/tree201/do-code/security/advisories/new

Include a minimal reproduction, affected version, impact, and any suggested mitigation. Reports will be acknowledged as soon as practical; please allow time for a fix before public disclosure.