The current master branch is the supported development line.

Please report security issues through GitHub private vulnerability reporting if it is enabled for the repository. If that is unavailable, open a GitHub issue with a short summary and avoid attaching private source images, credentials, tokens, or other sensitive files.

Good reports include:

• What can go wrong.
• How to reproduce it without private data.
• Browser, operating system, and Node.js version.
• Whether the issue affects local-only use, hosted deployments, or both.

• Source images should stay local to the browser session.
• Development caches, temporary files, and QA artifacts should remain under the D-drive project paths documented in the README.
• Commercial use should follow COMMERCIAL-LICENSE.md; public non-commercial use should preserve the required notices in LICENSE and NOTICE.md.
• Commercial licensing, collaboration, information on existing products, and other enquiries should go to Glyn via email at glyn@twohandsnetwork.co.uk.