Security Policy

Reporting a Vulnerability

If you discover a security vulnerability please report it privately rather than opening a public issue.

Contact options:

1. Email: jjn1056@gmail.com

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

Supported Versions

Only the latest release receives security updates.

Regulatory Note

PAGI is non-commercial open source software, exempt from EU Cyber Resilience Act (CRA) requirements. Organizations integrating PAGI into commercial products are responsible for their own regulatory compliance.