The latest state of main and the most recent published release are supported. Older dataset releases remain available for reproducibility but do not receive security updates.

Do not open a public issue for a vulnerability that could put users, systems, or data at risk.

Send a private report through the FirmaPanel contact form with “Incoterms reference security report” in the subject. Include the affected file or release, potential impact, reproduction steps, suggested mitigation if known, and a safe way to contact you.

Avoid accessing data that does not belong to you, disrupting services, or publicly disclosing the issue before maintainers have had a reasonable chance to investigate.

An inaccurate field, summary, example, or documentation statement is normally a data-quality issue rather than a vulnerability. Use the public correction issue form for those reports.