ShutterSpool is in pre-release development and has no published supported release yet. Report vulnerabilities affecting the current main branch. A passing build is not a production-readiness guarantee.

Use GitHub private vulnerability reporting. Do not disclose vulnerabilities, credentials or private photographs in public issues or pull requests.

Include the affected commit or version, configuration needed to reproduce the issue, expected and observed behavior, and likely impact. Use synthetic media, redact credentials and tokens, and provide the smallest safe reproduction. Do not test against installations you do not own or have permission to assess.

The maintainer will investigate reports and coordinate fixes and disclosure through the private advisory. This personal project cannot promise a response or remediation deadline.