Report a security vulnerability privately through GitHub Security Advisories for this repository. Do not include credentials, customer data, or unpublished exploit details in a public issue.

Incorrect or missing VAT data is a data-quality issue rather than a security vulnerability; use the data issue templates so the source and effective date can be reviewed publicly.

The dataset and packages are intended for software integration. They do not determine the tax treatment of a transaction and do not provide tax or legal advice. VAT treatment can depend on product or service category, customer status, location, exemptions, place-of-supply rules, and effective date. VAT-number format validation is offline syntax validation and does not confirm that a business is registered.