Report vulnerabilities privately through GitHub's vulnerability reporting form. Include the affected build or commit, reproducible steps, impact, and a minimal example without personal or confidential data. Do not publish credentials or exploit details in public issues.

The maintained repository integration and current v13.0 publication are the review focus. Historical releases are archived research artifacts, not supported production software. Frozen files are preserved; a confirmed correction is published separately with its own identity and evidence. Response times are not guaranteed.

For mathematical, citation, or claim-boundary problems without a security vulnerability, use a normal issue. This research-and-teaching project does not provide production or physical-safety assurance.