PathRelay is currently an early-preview 0.x project.

Please report security issues privately to the maintainers instead of opening a public issue with exploit details. Include the affected version, reproduction steps, expected impact, and any relevant logs or files.

During early preview, there is no guaranteed response SLA or remediation timeline. We will prioritize issues that affect repository integrity, path traversal, managed-file overwrite safety, manifest tamper detection, or unsafe loader execution.