Petri is distributed on PyPI as the petri-grow package (repository onthemarkdata/petri) and is currently in 0.x alpha development under the Apache-2.0 license.

Only the latest 0.x release line receives security fixes. Older releases are not maintained — please upgrade to the most recent version before reporting.

Please report security vulnerabilities privately. Do not open a public issue for a suspected vulnerability.

To report, use GitHub's private vulnerability reporting: go to the repository's Security tab and click Report a vulnerability. This opens a private advisory visible only to the maintainers.

When reporting, please include enough detail to reproduce the issue — affected version, steps to reproduce, and the potential impact.

We aim to acknowledge new reports within 7 days (best effort) and will keep you informed as we investigate and work toward a fix. Thank you for helping keep Petri and its users safe.