We take the security of RecSys Lab seriously. If you believe you have found a security vulnerability, please do not open a public issue.

Instead, report it privately by emailing the maintainers directly.

• Type of vulnerability
• Steps to reproduce
• Affected versions
• Any potential impact

• Acknowledgement within 48 hours
• Initial assessment within 5 business days
• Fix timeline communicated within 10 business days

We appreciate your help in keeping the community safe!

Once a fix has been developed and released, we will:

1. Notify reporters that a fix is available
2. Publish a security advisory on GitHub
3. Credit the reporter (if desired)

We prefer all communications in English or Hindi.