As this project is a purely client-side, zero-dependency static web application, security vulnerabilities are rare. The latest version on the main branch is actively supported and maintained.

If you discover a potential security issue or vulnerability, please do not open a public issue.

Instead, please report security advisories confidentially via GitHub Security Advisories.

Please include:

1. Description of the vulnerability.
2. Steps to reproduce or proof-of-concept.
3. Potential impact.

We will acknowledge receipt of your vulnerability report within 48 hours and work with you on a resolution and coordinated disclosure.