This repository publishes public attribution data and validation tooling. Please report security issues involving the tooling, release workflow, or repository configuration privately when possible.

Use GitHub private vulnerability reporting if enabled, or contact the maintainers through the repository owner.

Incorrect attributions are not usually security vulnerabilities, but they can still be important. Open an issue or pull request with public evidence and the affected block range.