Skip to content

Security: FirmaPanel/trade-country-data

Security

SECURITY.md

Security Policy

Supported versions

The latest state of main and the most recent published release are supported. Older dataset releases remain available for reproducibility but do not receive security updates.

Reporting a vulnerability

Do not open a public issue for a vulnerability that could put users, systems, or data at risk.

Send a private report through the FirmaPanel contact form with “Trade Country Data security report” in the subject. Include:

  • the affected file, release, script, or workflow;
  • a clear description of the issue and potential impact;
  • reproduction steps or a minimal proof of concept;
  • any suggested mitigation; and
  • a safe way to contact you for follow-up.

Please avoid accessing data that does not belong to you, disrupting services, or publicly disclosing the issue before maintainers have had a reasonable opportunity to investigate and address it.

Data-quality reports

An incorrect country record, membership, relationship, source, or official link is normally a data-quality issue rather than a security vulnerability. Report it with the public correction issue form.

There aren't any published security advisories