Please report security issues privately by email to hello@odevio.com rather than opening a public issue. Where possible, include steps to reproduce, the affected version, and the impact you observed.

We aim to acknowledge your report within 5 business days and will keep you informed as we work on a fix.

Security fixes are released against the latest version of Odevio published on PyPI. Before reporting, please upgrade with pip install --upgrade odevio to confirm the issue is present on the current release.

Please give us a reasonable opportunity to release a fix before disclosing an issue publicly. We are grateful for responsible reports and are happy to credit reporters who would like to be acknowledged.