Please do not report security vulnerabilities through public GitHub issues.

Instead, email the maintainers directly:

• Chris Jackett ([email protected])
• Kevin Barnard ([email protected])

Include a description of the vulnerability and its potential impact, steps to reproduce or proof-of-concept code, and any suggested mitigation. You should receive a response within 10 business days. We aim to release a patch within 30 days of a confirmed vulnerability.

This policy covers the ifdo Python package and the csiro-fair/ifdo-py GitHub repository.