This project is personal/experimental. Security fixes are applied to main only.

If you discover a vulnerability:

• Do not open a public issue.
• Contact me directly via [GitHub profile email] or private channel.
• I will acknowledge receipt within 7 days.

• This project uses a shared password model — not suitable for production multi-user use.
• Optional telemetry features (remote logging, snooper) are disabled by default.
• Any secrets should be provided via .env; never commit them to the repo.