If you discover a security vulnerability in pdf_pilot, please report it responsibly:

1. Do NOT open a public issue for security vulnerabilities
2. Email: Electricitysheep
3. Alternatively, use GitHub's private vulnerability reporting

We will respond within 48 hours and aim to release a fix within 7 days for confirmed vulnerabilities.

When using pdf_pilot:

• Never process untrusted PDFs in environments with access to sensitive data
• Use sandboxed environments for processing unknown PDF sources
• Keep dependencies updated — run pip install --upgrade pdf-pilot regularly
• Validate PDF sources before processing in production pipelines