Please report security issues privately.

Preferred contact: open a private security advisory on the GitHub repository:

https://github.com/salvomazzaglia/backup-integrity-verifier/security/advisories/new

If that is unavailable, contact the maintainer through GitHub:

https://github.com/salvomazzaglia

Include:

• Affected version
• Reproduction steps using synthetic fixtures only
• Impact assessment
• Any suggested fix

Do not attach real backup archives, production reports, credentials, private keys, or personal data.

• Initial acknowledgement is typically within 7 days
• Confirmed issues are patched in a maintenance or minor release when practical
• Public disclosure should wait until a fix is available unless otherwise coordinated

Good-faith research against synthetic fixtures and local clones of this repository is welcome. Do not attempt to access systems or data you do not own.