If you find a security issue in nuggetindex, please report it privately by emailing szerhoudi@acm.org rather than filing a public GitHub issue. Include:

• A description of the issue and its impact.
• The minimal steps required to reproduce.
• The version of nuggetindex (e.g. pip show nuggetindex).

You should expect an acknowledgement within seven days. Public disclosure will be coordinated once a fix is released.

Only the latest minor release receives security fixes.