Do not open a public issue for a security vulnerability. Send a private report to the repository maintainer through GitHub's Private vulnerability reporting feature (Security → Advisories → Report a vulnerability), or to shrutikbalwan@gmail.com with subject SignalProcessingToolkit security.

Include affected versions, a minimal reproduction, impact, and any proposed mitigation. Please allow maintainers reasonable time to investigate and release a fix before public disclosure. We will acknowledge reports within seven days where possible.

The project does not guarantee a fixed response or remediation deadline. Never include real credentials, private sensor recordings, or personal data in a report.