Please do not report vulnerabilities in a public issue. Use GitHub Private Vulnerability Reporting for the affected repository when it is available. If it is not available, contact us through GetBirthChart contact. Do not include credentials, API keys, tokens, private chart data, or other private user data in a report unless it is strictly necessary.

Please distinguish a security vulnerability from:

• a calculation disagreement or reproducibility question;
• interpretation quality or content feedback; or
• a feature request.

Those topics should use the appropriate issue form or support route described in SUPPORT.md.

GetBirthChart does not currently operate a paid bug bounty program. We appreciate responsible disclosure and will assess reports based on impact, exploitability, and affected systems.