graft is pre-1.0; only the latest released version receives fixes.

Please report security issues privately using GitHub's "Report a vulnerability" flow rather than opening a public issue.

A couple of notes specific to this library:

• load_connector uses torch.load(..., weights_only=True), so loading a checkpoint will not execute arbitrary pickled code. Still, only load checkpoints you trust.
• Connectors are plain nn.Modules and do not execute any code from a config.

I aim to acknowledge reports within a few days.