This repository holds a research script and its monthly results; it ships no releases.

If you find a security problem in scan.py or the workflow, report it privately: email hello@keelinfra.io with the subject "release-integrity security report", or use GitHub's Report a vulnerability form when it is enabled. Please do not open a public issue for security reports. You will get an acknowledgment within 3 business days.

If a result about your project looks wrong, for example it was checked before you turned on immutable releases, open a normal issue. Results are a snapshot of the latest release on the day of the run; the next monthly run picks up changes on its own.