The current minor release receives security fixes.
| Version | Supported |
|---|---|
| 2.3.x | ✓ |
| < 2.3 | ✗ |
Report security issues through GitHub's private vulnerability reporting. Do not open a public issue for security vulnerabilities.
Best-effort response, typically within two weeks.
In scope: allelix source code, download integrity (ADR-0029), local file handling, CLI behavior.
Out of scope: upstream database content correctness. ClinVar misclassifications, ClinPGx (formerly PharmGKB) annotation errors, GWAS Catalog data quality, AlphaMissense / CADD score errors, and similar issues are third-party data — report them to the source database. Allelix verifies download integrity but does not and cannot verify the clinical accuracy of what those databases contain.