CodAdapt 0.1.x is the supported experimental series. Report suspected vulnerabilities privately to the repository owner with the affected version, reproduction, impact, and suggested mitigation. Do not open a public issue containing secrets or private data.

CodAdapt is not a security boundary. Treat external schemas and outputs as untrusted where appropriate. Pickle and joblib can execute code while loading; load only trusted artifacts in compatible environments. No remediation SLA is guaranteed for this alpha release.