Please do not report security vulnerabilities through public GitHub issues.

Instead, email the maintainers directly:

• Chris Jackett (chris.jackett@csiro.au)
• Kevin Barnard (kbarnard@mbari.org)

Include a description of the vulnerability and its potential impact, steps to reproduce or proof-of-concept code, and any suggested mitigation. You should receive a response within 10 business days. We aim to release a patch within 30 days of a confirmed vulnerability.

This policy covers the ifdo Python package and the csiro-fair/ifdo-py GitHub repository.