Please report security vulnerabilities to security@arcade.dev. Do not open a public GitHub issue for a vulnerability.

Include what you found, how to reproduce it, and the version or commit you tested.