For security-related issues, do NOT open a public issue. Instead, please send an email to the list of maintainers with the subject header with prefix "spdx/golang-tools SECURITY:", so that we can respond to you in a timely manner.