OpenCite is currently in active development. Please report security issues for the latest version on the default branch.

Please do not open public GitHub issues for suspected security vulnerabilities.

Instead:

1. Open a private security advisory in this repository (Security tab).
2. Include details to reproduce the issue and any proof-of-concept material.
3. Include potential impact and affected components if known.

We will acknowledge receipt as soon as possible and work with you to validate, triage, and remediate the issue.

Please allow time for triage and remediation before public disclosure. Coordinated disclosure helps protect users and downstream adopters.