If you believe you have found a security vulnerability in go-tpkt, please report it responsibly.

• Do not open a public GitHub issue for security-sensitive bugs.
• Email security@otfabric.io, or open a private security advisory on GitHub (the Security tab → Advisories → Report a vulnerability).

Include a clear description, steps to reproduce, affected versions, and the impact. We will acknowledge your report and work with you on a fix and disclosure timeline.