dupehell 0.6.0

Synthetic multi-domain dataset generator for record linkage benchmarking
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

<!-- DupeHell -- MIT License -->

# Security Policy

---

## Supported versions

| Version | Supported |
|---------|-----------|
| 0.x | ✅ |

---

## Reporting a vulnerability

DupeHell generates **synthetic data** and does not process real personally
identifiable information. However, security issues related to the generation
pipeline, dependency vulnerabilities, or potential misuse vectors should be
reported.

If you discover a security vulnerability, **do not open a public issue**. Report
it privately via GitHub's Security Advisory tab:

[https://github.com/vntoinekaio/DupeHell/security/advisories](https://github.com/vntoinekaio/DupeHell/security/advisories)

You can also contact the maintainers directly through GitHub.

### What to include

- Description of the vulnerability
- Steps to reproduce (if applicable)
- Potential impact
- Suggested fix (optional)

### Response timeline

| Step | Timeframe |
|------|-----------|
| Acknowledgment | Within 48 hours |
| Initial assessment | Within 5 business days |
| Fix timeline | Communicated based on severity |

---

## Scope

- Generation pipeline code (Python + Rust)
- CLI argument handling
- Pool data files
- Dependencies (arrow-rs, clap, serde, etc.)

## Out of scope

- Misuse of the generated synthetic data (covered by [ETHICS.md](../ETHICS.md))
- Hypothetical attacks requiring physical access or modified runtime environments

---

## Responsible disclosure

Please allow reasonable time for a fix before any public disclosure. We will
credit reporters in release notes unless they prefer to remain anonymous.