Summary by cubic

Clarifies the collaborator review cycle and strengthens guidance on triage, PR expectations, and security practices in COLLABORATOR_GUIDE.md. Adds a 21‑day window for PR change requests and aligns the guide with AGENTS.md, THREATMODEL.md, and SECURITY.md.

Description

A clear and concise description of the PR.

Use this section for review hints, explanations or discussion points.

• Summary of changes
  • Rewrote and restructured the collaborator guide with clear sections (Code of Conduct, Triage, Questions, Submit PRs, Security, Do/Don’t).
  • Set policy to not close issues for inactivity; request minimal reproductions and convert off‑topic issues to discussions.
  • Added a detailed PR checklist (scope, adapter parity, types index.d.ts/index.d.cts, AxiosError handling, tests/CI, deps, security‑sensitive areas, deprecations, API shape, Conventional Commits, semver targeting).
  • Introduced a 21‑day response window for requested PR changes before closing (reopen if addressed).
  • Documented security disclosure process via SECURITY.md and a short “do not do” list (ignore-scripts, runtime deps, weakening safeguards).
• Reasoning
  • Make expectations explicit, reduce regressions, and standardize reviews across maintainers.
  • Improve responsiveness without losing history; ensure security‑related changes get extra scrutiny.
• Additional context
  • Targets v1.x guidance; no runtime or API changes.

Docs

Please mirror the updated guidance on the docs site in /docs/:

• Add or update a “Collaborator Guide” page, and cross‑link from “Contributing”.
• Link to AGENTS.md, THREATMODEL.md, SECURITY.md, and the Code of Conduct.
• Update sidebar/navigation to surface the review cycle and PR checklist.

Testing

No tests added. This is a documentation‑only change; no test coverage required.

Semantic version impact

No version impact. Documentation update only; no release change needed.

^{Written for commit 7a0dc7c. Summary will update on new commits.}