Please report security issues privately to security@pametan.co rather than opening a public issue. We aim to acknowledge within 2 business days.
This package ships static reference data and small pure accessor functions — it makes no network calls and handles no secrets. The most impactful "security" issue here is a materially wrong figure (a limit, cut-off or irrevocability flag) that could mislead an integration; please report those with a source so we can correct and re-date the record.
The dataset is well-sourced reference material, not financial, legal or compliance advice. Confirm figures with the scheme operator before relying on them.
The latest published minor version receives fixes. Until a 1.0 release, both the schema and the data may change as rails evolve.