Report suspected vulnerabilities through GitHub Security Advisories for this repository or by contacting security@sylphx.ai.

Do not open public issues for vulnerabilities, malformed media samples that trigger unsafe parser behavior, package publish credentials, private consumer media, unreleased codec compatibility data, or external codec licensing concerns. If a secret or package-publish credential is exposed, rotate it first, then document recovery evidence in the owning runbook or incident record.