Security fixes are applied to the current master branch. The deployed GitHub Pages application and its versioned static API are built from that branch.

Please report a suspected vulnerability privately through GitHub Private Vulnerability Reporting. If private reporting is unavailable, contact the repository owner through the GitHub profile. Do not open a public issue for security-sensitive findings.

Include a clear description, affected component or generated artifact, reproduction steps, impact, and any proof of concept that is safe to share. Do not include credentials, private keys, access tokens, or unnecessary personal data.

For catalog or repository trust concerns, include the affected product or source ID, release and architecture, relevant official documentation or metadata, and why the current entry may be unsafe or inaccurate.

Reports are reviewed as promptly as possible. Maintainers may request clarification, confirm scope, prepare a fix, and coordinate disclosure through the private report. Please allow time for assessment and remediation before sharing details publicly.