Please do not open public issues for suspected vulnerabilities. Use GitHub's Security → Report a vulnerability private security advisory flow for this repository.

Supported code is the current main branch. Reports should include affected components, reproduction steps, impact, and suggested mitigations without including real household data. This project is not independently audited; self-hosters remain responsible for secure deployment, TLS, host patching, backups, and integration credentials.