Please do not report security vulnerabilities in public issues.

Use GitHub private vulnerability reporting when it is available for this repository. If that is not available, contact the maintainer privately before sharing technical details publicly.

Include only the information needed to reproduce and understand the issue:

• affected version, commit or branch;
• affected platform;
• minimal reproduction steps;
• expected and actual behavior;
• impact and scope;
• any safe logs or screenshots with secrets removed.

Do not include tokens, private keys, passwords, signing certificates, private customer data or production credentials.

Electron2D is currently in preview development. Until the first supported release is published, security fixes target the main branch.

Please give the maintainer time to investigate and prepare a fix before public disclosure.