The python-copier-template is a copier template that generates Python projects. Its security-sensitive surface is the generated CI/CD (.github/) and the template logic in template/ and copier.yml.

Please do not open a public issue for security vulnerabilities. Instead, report them privately through GitHub's Security Advisory workflow:

1. Go to https://github.com/kasi-x/python-copier-template/security/advisories/new
2. Provide a clear description of the vulnerability, including:
   • the affected file(s) / generated output;
   • the impact (e.g. secrets exposed in generated CI, command injection in a generated workflow);
   • a minimal reproduction, where possible.

If you cannot use the advisory form, email the maintainer(s) (see the GitHub profile for contact details).

You will receive an acknowledgement of your report. We aim to:

• triage the report within 7 days;
• keep you informed as a fix is prepared;
• credit you for the discovery (unless you prefer to stay anonymous).