opencode-mem is an active pre-release project. Security fixes are applied to the current main branch until a stable release is published.

Use GitHub's private security advisory flow instead of a public issue.

Include the affected revision, a minimal reproduction, expected impact, and relevant configuration with every database URL, provider key, stored observation, private tag, local path, and user identifier replaced by synthetic values.

Maintainers will investigate privately and coordinate disclosure before publishing a fix.