RAM-AutoResearch is currently in the 0.1.x research-preview line. Security fixes are applied to the latest public branch and release only.

Do not open a public issue for a suspected vulnerability.

When the repository is public, use GitHub's private vulnerability reporting or Security Advisory workflow if it is enabled. If that workflow is not available, contact the maintainers through the private contact channel listed on the repository profile.

Please include:

• A concise description of the issue and affected component.
• Reproduction steps or a minimal proof of concept.
• Any relevant environment details, such as Python version, operating system, and optional dependency versions.
• Whether the issue affects local experiment execution, dataset handling, report generation, or remote-run provider configuration.

The project does not currently operate a hosted service. Most security scope is therefore local code execution, dependency handling, dataset ingestion, archive extraction, report generation, and remote-run provider configuration.