The library that is developed in this repository is a first-party dependency of PHPUnit. PHPUnit's Security Policy applies to this library as well.

If you believe you have found a security vulnerability in this library, please report it to me through coordinated disclosure.

Use my PGP key for encrypted email, for example when your report includes proof-of-concept exploits against third-party systems.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.