Do not open public issues that contain credentials, non-public scientific data, service identifiers, or raw service logs.

Use GitHub private vulnerability reporting to report a security vulnerability. If the form is unavailable, open a public issue that contains no sensitive details and ask the maintainers for a private reporting channel. Use only public examples or synthetic reproductions in public issues.