Please do not open a public issue for security vulnerabilities. Email mkonamile@gmail.com instead, and include:

• The affected version(s)
• A description of the issue
• A minimal reproduction, if possible

You'll get an acknowledgment within 3 business days, and we'll work with you to understand the impact and ship a fix before details are published.

Spruce is a file-manipulation CLI. It is designed to be safe by default (dry-runs, prompts, never overwriting), but as with any tool that moves or deletes files, you should back up anything you care about before running mutating commands — and review the plan before confirming.