Use GitHub private vulnerability reporting for defects that affect this parser or its outputs. Do not attach production OpenAPI contracts, credentials, tokens, private hostnames, or assessment evidence.