pcset is a pure computation library with no runtime dependencies, no network access, and no file system access. The attack surface is limited to incorrect results from malformed input, which the library guards against with explicit validation.

If you find a security issue, please email amaar2cool@gmail.com with details and steps to reproduce. Please do not open a public issue for security reports. You can expect an initial response within a few days.

The latest published minor version receives fixes. Pre-1.0 releases may introduce breaking changes in minor versions, as allowed by semantic versioning.