Please report security issues privately to the project maintainer before opening a public issue.

Include:

• A short description of the issue.
• Steps to reproduce it.
• The affected browser, operating system, and commit if known.
• Whether personal media, local files, or object URLs are involved.

The project is a local-first browser app. Reports involving file handling, media previews, object URL cleanup, or accidental data exposure are especially useful.

Only the latest public version is supported.