Security Policy

Reporting a vulnerability

Report vulnerabilities privately through GitHub Security Advisories:

Do not open a public issue for a security problem. Include the affected version, a minimal reproduction, and the impact.

Only the latest release receives fixes. The project runs locally over stdio, does not listen on a network port, and does not store credentials.