Trust claims are the easiest to overstate, so each route below leads to the policy itself — stated in the repository's own words, not this site's summary of them.
Security policy
The safety hooks are a safety net against accidents, not a security boundary — the policy says so in exactly those terms. The hosted security page explains the limits and routes private reports to the repository advisory flow.
Security pageSecurity policyVerify a release download
Governance, in practice
Application paths stay closed until a human opens a narrow implementation window that fails closed in every direction; safety hooks refuse destructive actions with the reason; validation gates demand observed evidence.
Capability overview
Support
Repository issues are the support channel — bug reports, feature requests, and questions, each with a template. Support is best effort with no response-time guarantee, and what is not supported is named rather than implied.
Support policyOpen an issue
Contributing
Contributions are judged on evidence: a change ships for both supported platforms, reproduces the bug before fixing it, and never weakens a check to get a pass.
Contributing guideCode of conduct
Field reports
Anonymized write-ups from real adoptions — each verified defect becomes a permanent self-test case. This is the proof behind "proven by adoption, not only self-test."
Field reports