ServiceGraph is in early development. Please do not report security vulnerabilities in public issues.

Use GitHub's private vulnerability reporting for this repository. Include the affected version, reproduction steps, impact, and any suggested mitigation.

ServiceGraph runs local tools against source repositories. Review commands and configuration before use, keep upstream indexers updated, and do not store credentials in servicegraph.yaml.