Please report suspected vulnerabilities privately through GitHub's private vulnerability reporting: go to the Security tab of this repository and choose Report a vulnerability. Please do not open a public issue or pull request for a security problem.

Include what you found, how to reproduce it, and which version or commit it affects. You can expect an acknowledgement within a few days; this is a small project maintained by one person, so fixes are best effort.

This repository holds data files, JSON Schemas, generated types and the build and test tooling around them. Reports about the tooling, the published package, the GitHub workflows or their dependencies are in scope. Errors in the data itself are not security issues; please open a normal issue or pull request for those.