Do not open a public issue for a suspected vulnerability. Contact a project author privately using the contact information in pyproject.toml, include a minimal reproduction and impact assessment, and allow time for a fix before public disclosure.

Reports about AOM source, bundled callback code, session data handling, and release artifacts are in scope. General usage questions belong in SUPPORT.md.

AOM is in active development. No support or response timeline is guaranteed.