Security reports for this tap and the BarKeep application are handled through the main project's private vulnerability-reporting form. Do not open a public issue for an undisclosed vulnerability.

This repository's security scope includes cask and formula URLs, hashes, installation behavior, and release metadata. BarKeep application behavior is covered by the main security policy.

Do not include real credentials or private data in a report. Describe the affected package version, the installation path, reproduction steps, impact, and a suggested mitigation when available.