Please report a vulnerability privately, through this repository's Security → Report a vulnerability (GitHub private vulnerability reporting), rather than in an issue. You will get an answer within a week.

What is in scope: the bindings in this repository, and how they download and verify the engine (cmake/RippleEngine.cmake, scripts/pin-engine.sh). A problem in the engine itself is welcome here too, and is passed on to where it is fixed.