odit targets libgit2 v1.9.0 (vendored in libs/). Security updates and fixes are applied directly to the master branch.

If you discover a security vulnerability in odit, please report it responsibly:

• GitHub Security Advisories: Use GitHub's private vulnerability reporting feature on the repository's Security tab to draft and submit a report.
• Direct Contact: Email the maintainer at bradn4@gmail.com with full reproduction steps and impact details.

Please allow up to 48 hours for initial triage. All reported issues will be investigated promptly.