MoroccoAPI 1.0.0 is the first stable application version. Security fixes target the latest stable 1.x release. Versions earlier than 1.0.0 are not supported. Upgrade to the latest 1.x release when a security update is published.

Do not disclose credentials, personal data, private source material, or an exploitable vulnerability in a public issue.

On GitHub, open this repository's Security and quality → Advisories page and use Report a vulnerability if the option is available. If it is unavailable, open an issue asking the maintainers for a private security contact, without including vulnerability details or a proof of concept.

See GitHub's private vulnerability reporting guide.

Security reports may include:

• Authentication or authorization bypasses, if authentication is introduced.
• Injection, request forgery, or unsafe parsing.
• Accidental exposure of secrets or personal data.
• Supply-chain risks with a concrete impact.
• Abuse paths that threaten availability or upstream sources.

General feature requests and public data-quality reports should use normal GitHub issues.