Please report security issues privately by opening a GitHub security advisory for this repository when available, or by contacting the repository owner through GitHub.

Include enough detail to reproduce the issue, including the operating system, affected target package manager, and relevant command output. Please do not publish exploit details in a public issue before the report has been reviewed.

Security-sensitive areas include command execution, package manager argument handling, privilege escalation paths such as sudo or pkexec, and parsing of package manager output.