Use GitHub's private vulnerability reporting for security issues:

https://github.com/Krilliac/OmegaStrain-Reimplementation/security/advisories/new

Do not attach a retail executable, disc image, firmware, save state, extracted asset, key, credential, or private packet capture. Describe the smallest independently reproducible condition and provide hashes or synthetic input where useful.

Do not use the vulnerability channel for copyright, trademark, or other content-removal demands; use the contact path required by the relevant hosting policy.

Until the first release, only the current main branch receives security fixes. The project does not yet distribute a playable runtime or operate a network service.