Please report security issues privately, through GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability. That creates an advisory visible only to you and the maintainers.

If you cannot use GitHub, email support@insumermodel.com.

Please do not open a public issue for a suspected vulnerability.

This policy covers the repositories in the insumerapi organization and the hosted API at api.insumermodel.com. Our contact details are also published at insumermodel.com/.well-known/security.txt.

Your report will be acknowledged. If it is confirmed, we publish a GitHub Security Advisory and credit you as the reporter unless you ask us not to.