Please do not open a public issue for a security vulnerability.

Instead, use GitHub's private vulnerability reporting mechanism if it is available for this repository. If private reporting is unavailable, contact the repository owner directly through the contact information listed on the GitHub profile.

Please include:

• the affected version or commit;
• a description of the issue;
• reproduction steps or a proof of concept where appropriate;
• the potential impact.

This project is research software and is provided under its stated open-source license. Security reports concerning reproducibility, unsafe file handling, dependency vulnerabilities, unintended code execution, or corruption of scientific outputs are particularly useful.