If you discover a security vulnerability, please DO NOT create a public issue.

Instead, please email: quangminh2402.dev@gmail.com

Include:

1. Detailed description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)

You will receive acknowledgment within 48 hours.

When using better-code-review-graph:

• Never commit API keys to version control
• Use environment variables for embedding configuration
• Keep dependencies updated
• The graph database (.code-review-graph/graph.db) is local-only and should be gitignored
• repo_root parameter is validated against .git or .code-review-graph presence to prevent path traversal