Please do not open a public issue for an unpatched vulnerability, leaked API credential, participant record, or other sensitive disclosure. Contact the maintainers privately at mili4@meei.harvard.edu with:

• the affected file, commit or endpoint;
• reproduction steps that avoid unnecessary data access; and
• the impact and any suggested mitigation.

Do not include live credentials or person-level research data in the report. The maintainers will acknowledge receipt and coordinate remediation before public disclosure.

Security fixes are applied to the latest release and the default branch.