Do not disclose private documents, workspace databases, access tokens, or a working exploit against another person's data in a public issue.

If this repository's host offers private vulnerability reporting, use that channel. Otherwise, ask the maintainer for a private reporting channel without posting exploit details or sensitive information. This project currently makes no guaranteed security response time or support commitment.

Use the latest available release and keep independent backups. Releases are currently unsigned; obtain builds from the repository's official release channel and check published hashes when available. A matching hash establishes file consistency, not that software is free of vulnerabilities.