Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately:

• Use GitHub Security Advisories (preferred), or
• Email khanakia@gmail.com with the details.

Please include:

• A description of the vulnerability and its impact.
• Steps to reproduce (proof-of-concept if possible).
• Affected artifact and version (gqlkit, gqlkit-sdl, or gqlkit-ts) and environment.

We will acknowledge your report within a few days and keep you updated on remediation. We ask that you give us a reasonable window to release a fix before any public disclosure, and we're happy to credit you in the advisory.

Security fixes are applied to the latest released version of each artifact. Older versions may not receive patches; please upgrade to stay supported.