If you believe you have discovered a security vulnerability in an lsongdev project, please report it privately to security@lsong.org. Include the affected repository and version or commit, a concise description, reproduction steps, and potential impact. Share proof-of-concept details privately.

如果你发现 lsongdev 项目可能存在安全漏洞，请通过 security@lsong.org 私下报告。请尽可能提供受影响的仓库及版本或提交、问题描述、复现步骤和潜在影响。漏洞利用细节请通过私密渠道提供。

Do not publish exploitation details in a public issue or discussion before coordinated disclosure. If a particular repository enables GitHub private vulnerability reporting, that channel may also be used.

请勿在协调披露前通过公开 Issue 或 Discussion 发布可利用的漏洞细节。若对应仓库开启了 GitHub 私密漏洞报告，也可以使用该渠道。

Maintainers will review reports and work toward a reasonable coordinated disclosure process as resources permit. We cannot guarantee an acknowledgement time, fix deadline, bounty, or ongoing maintenance for every project.

维护者将在资源允许的情况下评估报告并协调披露；但不承诺固定响应时间、修复期限、漏洞奖励或持续维护义务。

For ordinary bugs and feature requests, use the relevant project's issue tracker.

一般 Bug 和功能建议请使用对应项目的 Issue。