The latest state of the main branch and the most recent published release are supported. Older dataset releases remain available for reproducibility but do not receive security updates.

Do not open a public issue for a vulnerability that could put users, systems, or data at risk.

Send a private report through the FirmaPanel contact form with “Procurement Glossary security report” in the subject. Include:

• the affected file, release, script, or workflow;
• a clear description of the issue and its potential impact;
• reproduction steps or a minimal proof of concept;
• any suggested mitigation; and
• a safe way to contact you for follow-up.

Please avoid accessing data that does not belong to you, disrupting services, or publicly disclosing the issue before maintainers have had a reasonable opportunity to investigate and address it.

An incorrect definition, category, alias, or relationship is normally a data quality issue rather than a security vulnerability. Report those problems using the public correction issue form.