Please do not open a public GitHub issue for a suspected security vulnerability.

Use GitHub's private vulnerability reporting for this repository when available. Include enough detail to reproduce and assess the issue, including affected versions, impact, and a minimal proof of concept when appropriate.

Maintainers will triage reports, coordinate remediation, and publish an advisory when disclosure is warranted.

Security reports may include vulnerabilities affecting SemaPact's CLI, importers, governance and lifecycle logic, CI/CD integration, credential handling, runtime platform integrations, or dependency supply chain.

General bugs, feature requests, and governance-policy disagreements should use normal GitHub issues instead.