Please report vulnerabilities and accidental disclosure of credentials, private dataset rows, heldout membership, or heldout labels through a private GitHub security advisory. Do not open a public issue containing sensitive material.

Maintainers will investigate reports, revoke exposed credentials when necessary, and remove sensitive Git objects before publishing a remediation.