Only the latest released version of src_method receives security updates.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub's private vulnerability reporting, or by email to aurora@algorithmiq.fi.

Include a description of the issue, the affected version, and a reproducer if you have one. We aim to acknowledge reports within five working days and to publish a fix and an advisory once the issue is confirmed and resolved.

src_method is a numerical library: it performs tensor-network arithmetic on arrays supplied by the caller and does not parse untrusted input formats, open network connections, or execute user-supplied code. The most likely security-relevant issues are therefore memory-safety problems surfaced through the optional CuPy backend, or dependency vulnerabilities. Reports about the behaviour of numpy or cupy themselves should go to those projects.