Please don't report security problems in public issues.

Report them privately through GitHub instead:

1. Go to the affected repository's Security tab.
2. Click Report a vulnerability.
3. Describe the problem, how to reproduce it, and its possible impact.

Only the maintainer can see these reports.

neuro-kitchen is maintained by a solo developer, so response times are best-effort:

• Acknowledgement: within 7 days
• Status update: within 30 days, including whether the report was accepted
• Fix: depends on severity; you'll be credited in the advisory unless you prefer not to be

Security fixes go into the latest release of each project. Older releases are not patched.

Some neuro-kitchen tools process research data that may include human-subject recordings. If you find a problem that could expose such data, mention it clearly in your report so it can be prioritized.