Please report security issues privately.

Use GitHub private vulnerability reporting if it is enabled for the repository. You can also email vschmalbach@vschmalbach.com.

Do not open a public issue for a vulnerability until a fix is available.

rungrad is pre-1.0. Security fixes may ship as patch releases without preserving bug-compatible behavior.