Project participants must communicate respectfully, review technical claims on their merits, protect private data and help maintain a safe, constructive environment. Harassment, discrimination, threats, deliberate disruption, impersonation and publication of another person's confidential information are unacceptable.
- Keep security reports private until coordinated disclosure.
- Do not post production credentials, mailbox content, personal data or private infrastructure details.
- Critique code and decisions, not people.
- Disclose relevant conflicts of interest.
- Respect licensing, copyright and attribution requirements.
Maintainers may edit or remove abusive or unsafe content, close discussions, reject contributions or restrict participation. Enforcement decisions should be proportionate, documented privately where appropriate and focused on protecting contributors and users.
Report conduct concerns through the repository's private maintainer contact or private security-advisory channel when confidentiality is required.