Do not open a public issue for security vulnerabilities.

1. Go to Security Advisories
2. Click "Report a vulnerability"
3. Fill in the details

Send a direct message to @bntvllnt with:

• Description of the vulnerability
• Steps to reproduce
• Impact assessment

• Acknowledgment: within 48 hours
• Initial assessment: within 1 week
• Fix release: within 2 weeks for critical/high severity

This package is an ESLint configuration — it runs at development time only, not in production. Vulnerabilities in transitive dependencies are tracked and patched promptly (see #11 for precedent).