Report vulnerabilities privately through GitHub: open the Security tab of this repository and choose Report a vulnerability. Please do not open a public issue.

Expect a first reply within seven days. OpenCited is maintained by one person, so a fix can take longer; you will be kept informed.

Code in this repository, including the CI workflows and the development scripts. Problems in third-party dependencies belong with their maintainers, but a note here is welcome when they affect OpenCited.

OpenCited is in early development. Only the latest commit on main receives fixes.