Security Policy

Security Policy

• Never hardcode app_token in source control.
• SODA2 Injection: SDK does not sanitize inputs to .where(), .market(), etc. Sanitize user input before passing to these methods.
• Data Parsing: Always validate df.columns and df.dtypes of returned DataFrames before numerical analysis, as CFTC API schema may change.