SPARTA is still in the 0.x phase. The main branch is the supported line for fixes.
Please do not open a public issue for sensitive security findings.
Preferred path:
- Open a private security advisory on GitHub if the repository has advisories enabled.
- If that is not available, contact the repository owner privately before public disclosure.
When reporting, include:
- affected endpoint or package
- reproduction steps
- expected impact
- logs, stack traces, or proof-of-concept if available
We will aim to confirm the report, reproduce it, and plan a fix before public disclosure.