This is a research project, but a few things are worth handling carefully.
If you find a security issue (for example, an accidental credential commit or a dependency vulnerability), please do not open a public issue. Instead, use GitHub's private vulnerability reporting or email the maintainer. You can expect an acknowledgement within a few days.
- Never commit real credentials. ArangoDB and LLM settings are read from the
environment (or a local
.env, which is git-ignored). Use.env.exampleas a template, and Colab Secrets for notebook runs. - If a secret is ever committed, rotate it immediately — removing it from the latest commit is not enough, as it remains in git history.
The latest release on main is supported. This project pins minimum dependency
versions in requirements.txt; run pip list --outdated periodically.