Skip to content

Security: mlb07/OSprey

Security

SECURITY.md

Security and Data Handling

Public-repository boundary

The repository accepts only synthetic demonstration inputs. Do not commit real Official Statements, workbooks, database files, API keys, personally identifying information, or employer/client material.

The .gitignore blocks common document, workbook, database, environment, and output paths. That is a guardrail, not a substitute for reviewing git diff --cached before every commit.

Reporting

If you discover a credential or non-public document in the repository, do not open a public issue. Contact the repository owner privately and rotate any affected credential immediately.

There aren't any published security advisories