• Email security@code-origin-detector.org with the subject SECURITY ISSUE.
• Provide a detailed description, reproduction steps, and the potential impact.
• Do not create a public issue until the team has acknowledged the report.

You will receive an acknowledgement within 48 hours. We aim to provide a resolution timeline within 7 days.

• Please refrain from sharing exploit details publicly until a fix is released.
• We will credit researchers in the SECURITY.md acknowledgement section if desired.

• Issues requiring physical access to a device.
• Vulnerabilities in third-party dependencies that are not exploitable within this project.

Thank you for keeping the Code Origin Detector ecosystem safe.