Window Rotator runs as a normal user process (asInvoker), needs no admin rights, opens no network connections and stores data only in the user's profile.

Please do not open a public issue. Use GitHub's private vulnerability reporting instead. You'll get an answer within a few days.

Only the latest release receives fixes.