Do not report security vulnerabilities in a public issue.

Report a vulnerability in private at samebase/samebase. The hub is @samebase/identity-broker plus the settings of this repository, and that repository holds the broker. Include the affected endpoint or workflow, the expected result, the actual result, and the minimum steps needed to reproduce it.

Use GitHub Issues for non-sensitive bugs and support requests.