Security fixes are provided for the latest published major version.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository: Security → Report a vulnerability.

Include the affected version, impact, reproduction steps, and any suggested mitigation. Please avoid accessing data that is not your own or disrupting the public demo. You can expect an acknowledgment within seven days and a status update within fourteen days. Confirmed issues will be coordinated privately until a fix or mitigation is available.

RepoReady is a repository-readiness tool, not a security scanner. A RepoReady score is not a security assessment or warranty.