miniOPs has no stable release yet. Security fixes will be applied to the latest released version once releases begin.

Please do not report security vulnerabilities through public GitHub issues.

Use GitHub's private vulnerability reporting instead. Include:

• a description of the issue and its impact,
• steps to reproduce or a proof of concept,
• the affected version or commit.

You can expect an initial response within 7 days.

Many machine learning serialization formats, including Python's pickle and joblib, can execute arbitrary code when a file is loaded. Only load model artifacts from sources you trust. This also applies to model bundles imported with miniops import, because they contain model artifacts. miniOPs will prefer safer formats where frameworks support them (for example skops for scikit-learn) and will document the risks of every format it uses.